Re: X-Amavis-Alert: BANNED, message contains x.com
Thomas Barth <[email protected]> Wed, 17 Jul 2024 10:11:40 +0200
| Newsgroups | gmane.mail.virus.amavis.user |
|---|---|
| Message-ID | <[email protected]> |
Am 2024-07-16 20:21, schrieb Nick Tait: > I believe the culprit is the following line in > /etc/amavis/conf.d/20-debian_defaults: > >> qr'.\.(exe|vbs|pif|scr|bat|cmd|com|cpl)$'i, # banned extension - >> basic > > ...which is designed to block filenames that have a ".com" extension. > i.e. You could try removing com from that expression? > > Please also be aware of this one: > >> # block certain double extensions anywhere in the base name >> qr'\.[^./]*\.(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)\.?$'i, > > ...which could get a hit on directories that include ".com." in the > name (e.g. if a directory was named "google.com.au"). This. I removed com from the expression. The mail was sent again and has now gone through. Thomas B