Content Protection on .xlsx file (Office 2010)

Discuss here all what concerns the MailCleaner anti-spam efficiency, share your rulesets and tips for SpamAssassin !

Moderators: FlorianB, Pascal, bourgeois, mentor

Array
Posts: 32
Joined: Fri May 28, 2010 2:12 pm
How did you hear about Mailcleaner: google
Location: Vicenza, Italy

Content Protection on .xlsx file (Office 2010)

Postby Array » Tue Sep 06, 2011 2:39 pm

I have a problem with content protection on a .xlsx attachment. Mailcleaner2010 beta3 keeps blocking my attachment and replace it with a .txt like this:

Code: Select all

This is a message from Mailcleaner
----------------------------------
The original e-mail attachment "rinnovo-2011-09-01.xlsx"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail the administrator and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Fri Sep  2 14:49:38 2011 the virus scanner said:
   MailCleaner:  (rinnovo-2011-09-01.xlsx)

Note to Administrator: your_hostname in 20110902/1QzTBg-0001Wm-Dw
--
Mailcleaner


I have tried to add a rule in the content protection configuration, which adds this line to the filename.rules.conf file in /usr/mailcleaner/etc/mailscanner directory:

Code: Select all

allow      \.xlsx$      +      -


and rebooted my machine, but any xlsx attachment is still blocked.

Any suggestion?
Array
Posts: 32
Joined: Fri May 28, 2010 2:12 pm
How did you hear about Mailcleaner: google
Location: Vicenza, Italy

Re: Content Protection on .xlsx file (Office 2010)

Postby Array » Fri Sep 09, 2011 4:35 pm

Got it!

I activated the archive file type protection and that blocked all xlsx and docx files, because they are xml with a zip compression. Just unchecked "archive" in file type protection and all worked just fine.
uncltom
Posts: 499
Joined: Tue Aug 26, 2008 3:01 am
How did you hear about Mailcleaner: I dont remember probably google?
Location: Spokane, WA

Re: Content Protection on .xlsx file (Office 2010)

Postby uncltom » Sat Sep 10, 2011 7:01 am

Nice find! Glad you got it straightened out.
User avatar
CCGTECH
Posts: 92
Joined: Thu Apr 25, 2013 4:59 am
How did you hear about Mailcleaner: open source community
Location: West Hollywood, CA

Re: Content Protection on .xlsx file (Office 2010)

Postby CCGTECH » Thu Feb 06, 2014 12:24 pm

I am having a problem where all inbound xlsx and docx attachments are being blocked. I've added each extension under Configuration/Content Protection/Attachment Name as \.docx$ and \.xlsx then disabled them so they are not blocked, but this doesn't seem to permit the attachments to pass through the filter. Disabling "archive" did not allow the attachments to pass, either.

Can someone provide detailed instructions on how to permit a specific type of attachment through mailcleaner?
User avatar
CCGTECH
Posts: 92
Joined: Thu Apr 25, 2013 4:59 am
How did you hear about Mailcleaner: open source community
Location: West Hollywood, CA

Re: Content Protection on .xlsx file (Office 2010)

Postby CCGTECH » Thu Feb 06, 2014 12:42 pm

Does anyone know if there are intentional built-in limitations as to encourage upgrading to the paid version? If not, is there an additional location specific files need to be specified to allow them to pass through the filter without being quarantined?
mschaeper
Posts: 8
Joined: Wed Apr 08, 2015 3:50 pm
How did you hear about Mailcleaner: google

Re: Content Protection on .xlsx file (Office 2010)

Postby mschaeper » Sat Aug 01, 2015 2:49 am

disabling "archive"' worked for me also
FlorianB
Posts: 258
Joined: Wed Apr 01, 2015 2:27 pm
How did you hear about Mailcleaner: job

Re: Content Protection on .xlsx file (Office 2010)

Postby FlorianB » Thu Aug 06, 2015 2:48 pm

Hello,
There is no, i can grant that !
But detection of xlsx and docx was a bug (in all version: paid or community). it came from the new format for those file which is a real archive and an old version of the file command (and magics) which detect that as executables.
It is corrected is 20150601 version called "Patchwork", and yes, no time to announce it for now and no iso for a minor update. I ll do at least some announce when we ll have less important things on fire.
You should care for two things:
1) With 32 Bit ONLY, after patching to this version, you ll have to uninstall mc-clamav and reinstall 0.95 version. Little bug with a bad package, we ll have to correct this.
2) There is a new bug which look like similar but is not: those file are now detected perfectly well as archive and MC will scan this archive (if you didn't disable this feature). With Office 365 or Sharepoint , if you MODIFY a xlsx, docx, anythinx-from-microsoft-x, it will had a 0000.dat file which is detected as a virus. So the attachment considered infected. We ll address that in next minor patch probably (between September and October i hope).
Best regards,
Florian B
MailCleaner Support Team
Linus
Posts: 18
Joined: Mon Apr 22, 2013 10:48 pm
How did you hear about Mailcleaner: Googling and reading articles about mail gateways.

Re: Content Protection on .xlsx file (Office 2010)

Postby Linus » Fri Feb 12, 2016 8:01 am

Is there any way to get this patch installed on the community version? I tried to search, but I only found a recent post about no updates for mailcleaner community will be released before major update. I have xlsx files jamming.
Linus
Posts: 18
Joined: Mon Apr 22, 2013 10:48 pm
How did you hear about Mailcleaner: Googling and reading articles about mail gateways.

Re: Content Protection on .xlsx file (Office 2010)

Postby Linus » Thu Mar 10, 2016 9:25 am

Maybe this regular update procedure is sufficient, as I haven't noticed this problem in a while.

Code: Select all

cd /usr/mailcleaner
cvs -q update -dP
source lib/updates/update_binaries.sh
stabilizeBinaries

Return to “Filter efficiency”

Who is online

Users browsing this forum: No registered users and 2 guests