Search found 862 matches
- 08 Aug 2022, 17:07
- Forum: General Discussion (csf)
- Topic: Can't Find IP Range In CC_DENY
- Replies: 1
- Views: 619
Re: Can't Find IP Range In CC_DENY
It is CC_DENY so you are blocking a country that contains that CIDR. You can't remove a range or an IP address from a CC blocklist. If the range has been allowed in csf, the allow *should* override the block.
- 03 Aug 2022, 09:01
- Forum: MailScanner Front-End
- Topic: deny filenames
- Replies: 1
- Views: 1672
Re: deny filenames
Hello, You need to use regular expressions in this field as shown in the examples in the description above the "Allow Filenames" setting. For instance, if you want to deny all .tar files, use this: .\tar$ This should block filenames with an extension of exactly tar and nothing else. Regard...
- 31 Jul 2022, 12:28
- Forum: General Discussion (csf)
- Topic: hook or custom script when LFD triggers
- Replies: 2
- Views: 1001
Re: hook or custom script when LFD triggers
The option BLOCK_REPORT allows you to run your own external script whenever lfd blocks an IP. See the readme.txt for more information. If you want some action performed on other alerts besides blocks, there is no inbuilt way to do this. You could write your own daemon to monitor the lfd log, or scan...
- 14 Jun 2022, 09:03
- Forum: MailScanner Front-End
- Topic: rules no longer working
- Replies: 13
- Views: 4257
Re: rules no longer working
I wouldn't do the file command on the zip file but on the xls file. MailScanner will scan within zip archives. Otherwise you'll just block all zip files. Unfortunately I can't really help any further on how to use the results of the file command, you'll need to find this information elsewhere. Maybe...
- 13 Jun 2022, 18:27
- Forum: MailScanner Front-End
- Topic: rules no longer working
- Replies: 13
- Views: 4257
Re: rules no longer working
That is not going to work, you need to do what I suggested and check what the "file" command says about the file you want to block.
- 13 Jun 2022, 16:59
- Forum: MailScanner Front-End
- Topic: rules no longer working
- Replies: 13
- Views: 4257
Re: rules no longer working
You'd need to find out how the file command on your server classifies the type of file, and add it to the filetype.rules.conf and archives.filetype.rules.conf files in the correct format. Check those files for more information. As far as I know, you would need to run the "file" command aga...
- 10 Jun 2022, 17:53
- Forum: MailScanner Front-End
- Topic: rules no longer working
- Replies: 13
- Views: 4257
Re: rules no longer working
That isn't the complete report. But it sounds like it may be detecting the filetype rather than the filename, so you need to check that and possibly modify the filetype.rules.conf and/or archives.filetype.rules.conf as well. There is a knowledgebase article that should help you identify what is actu...
- 08 Jun 2022, 17:14
- Forum: MailScanner Front-End
- Topic: rules no longer working
- Replies: 13
- Views: 4257
Re: rules no longer working
What exactly is the MailScanner report for the blocked xslx files and the blocked xls files?
- 07 Jun 2022, 12:49
- Forum: MailScanner Front-End
- Topic: rules no longer working
- Replies: 13
- Views: 4257
Re: rules no longer working
Is it working now?
- 07 Jun 2022, 12:14
- Forum: MailScanner Front-End
- Topic: rules no longer working
- Replies: 13
- Views: 4257
Re: rules no longer working
Are you sure these files are being blocked because of their file name and not because of the file type? What is the message you are seeing in MailControl?
Have you ensured that you used [tab] characters between fields in the filename.rules.conf file and not spaces?
Have you ensured that you used [tab] characters between fields in the filename.rules.conf file and not spaces?