Koozali.org: home of the SME Server

Email Filtering For Checking Attachments!!!

Offline raem

  • *
  • 3,972
  • +4/-0
Re: Excellent
« Reply #15 on: February 06, 2006, 12:33:45 PM »
nate
 
> TAEKACK5JT
> TAEHAMi6Uz

Those patterns are not in the default database, so messages with those types of file attachments will not be rejected.

To quote from the HOWTO:

"A default pattern matching database is created with common executable file patterns, which cover the majority of currently known Windows type executable viruses.
Email messages are rejected if the attachment content matches an entry in the patterns database. By default this includes the majority of *.exe files, older v1.0 *.zip files and some *.gif files."


So you can see that the default patterns for exe type files match those for known viruses that mimic certain exe files. Not all exe files are included by default as they don't need to be.

Of course you can easily add any pattern to the database, including all exe type patterns including those mentioned above.
...

Offline nate

  • ***
  • 55
  • +0/-0
    • http://www.solardepot.com
Got it.
« Reply #16 on: February 06, 2006, 04:32:01 PM »
Got it. It all makes sence.  Thanks again.
 
- N
....Making the Jump to 7.x   8-)

Offline idyll

  • ****
  • 113
  • +0/-0
pattern matching on 6.0.1-01
« Reply #17 on: February 09, 2006, 02:22:52 AM »
Hello.

I followed the instructions for the Virus and file blocking HOWTO using smtpfront-qmail for sme server.

I also copied the 7.0 Pre1 mailpatterns per another post.

I do not have any additional GUI configuration options for this contrib on my web server panel. I see clearly where it resides on the 7.0 server, but not my retro-fitted 6.0.1-01.

Any pointers or suggetions?

thanks
regards,

patrick
...

Offline raem

  • *
  • 3,972
  • +4/-0
Re: pattern matching on 6.0.1-01
« Reply #18 on: February 10, 2006, 01:52:12 AM »
idyll

> I do not have any additional GUI configuration options for this contrib..

Look in the existing E-mail panel, some new fields are added.

Failing that try checking if the rpms are installed
rpm -q rpmname

Failing that check all the steps in the HOWTO.
...

Offline gordonr

  • *
  • 646
  • +0/-0
    • http://www.smeserver.com.au/
Re: Excellent
« Reply #19 on: February 10, 2006, 08:56:51 AM »
Quote from: "nate"
Ray,
 
First, I want to say thank you so very much!  I have seen the light and I am now a big fan; Pattern Matching Rocks!  The system is working great.
 

Yep - I like it :-)

Would you please raise a bug in the bug tracker against 7.0, noting the EXE patterns which got through? Thanks.
............