Re: Cannot ban lzh attachment

Bastian Blank <[email protected]>
Newsgroups gmane.mail.virus.amavis.user
Message-ID <[email protected]>
On Tue, Nov 30, 2021 at 02:35:11PM +0200, Nikolaos Milas wrote:
> ### BLOCKED ANYWHERE
>    qr'^\.(exe|lha|cab|dll|lzh)$',

Here you are blocking litral ".lzh", not something ending with .lzh.
This means Amavis will block the type LZH, not a filename.

> Nov 30 09:24:07 mailgw1 amavis[679693]: (679693-19) p005 1/3 Content-Type:
> application/x-rar, base64, size: 279014, SHA1 digest:
> 33ef47204c4cfbcd959b410db9d1de3da815c86f, name: proforma Τιμολόγιο Αρ. M
> 67EE0077.
> lzh

But Amavis reports a rar file.  So you want ".rar".

Bastian

-- 
Warp 7 -- It's a law we can live with.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.