| |
MailScanner.conf − Main configuration for
MailScanner
@@ -54,7 +57,7 @@
-
+
@@ -65,7 +68,7 @@
-
+
| |
MailScanner is configured using the file
MailScanner.conf. The location of this file varies from
@@ -76,24 +79,24 @@
-
+
-
-
+
-
| |
Linux:
| |
+ | |
/etc/MailScanner
|
+ |
|
-
+
| |
FreeBSD: /usr/local/etc/MailScanner
Other: /opt/MailScanner/etc
@@ -128,7 +131,7 @@
-
+
@@ -136,8 +139,8 @@
-
-
+
|
+ | |
Default: 5
MailScanner uses your server efficiently by running
@@ -153,7 +156,7 @@
-
+
@@ -161,8 +164,8 @@
-
-
+
|
+ | |
Default: not to change user
Provided for Exim users (and anyone not running sendmail
@@ -174,7 +177,7 @@
-
+
@@ -182,8 +185,8 @@
-
-
+
|
+ | |
Default: not to change group
Provided for Exim users (and anyone not running sendmail
@@ -195,7 +198,7 @@
-
+
@@ -203,8 +206,8 @@
-
-
+
|
+ | |
Default: 5
How often (in seconds) should each process check the
@@ -219,7 +222,7 @@
-
+
@@ -227,8 +230,8 @@
-
-
+
|
+ | |
Default: /var/spool/mqueue.in
Directory in which MailScanner should find e−mail
@@ -248,7 +251,7 @@
-
+
@@ -256,8 +259,8 @@
-
-
+
|
+ | |
Default: /var/spool/mqueue
Directory in which MailScanner should place scanned
@@ -269,7 +272,7 @@
-
+
@@ -277,8 +280,8 @@
-
-
+
|
+ | |
Default: /opt/MailScanner/var/incoming
Default FreeBSD: /var/spool/MailScanner/incoming
@@ -290,7 +293,7 @@
-
+
@@ -298,8 +301,8 @@
-
-
+
|
+ | |
Default: /opt/MailScanner/var/quarantine
Default FreeBSD: /var/spool/MailScanner/quarantine
@@ -312,7 +315,7 @@
-
+
@@ -320,8 +323,8 @@
-
-
+
|
+ | |
Default: /opt/MailScanner/var/MailScanner.pid
Default FreeBSD: /var/run/MailScanner.pid
@@ -335,7 +338,7 @@
-
+
@@ -343,8 +346,8 @@
-
-
+
-
-
+
-
|
+ | |
Default: 14400
To avoid resource leaks the MailScanner parent process
@@ -362,20 +365,20 @@
MTA
| |
+ | |
Default: sendmail
|
+ |
|
-
-
+
|
+ | |
MailScanner works with sendmail and exim. Since the queue
handling differs a bit, you have to tell MailScanner which
MTA you are using. Valid options are sendmail and exim.
@@ -385,7 +388,7 @@
-
+
@@ -393,8 +396,8 @@
-
-
+
|
+ | |
Default: /usr/lib/sendmail
Default FreeBSD: /usr/sbin/sendmail
@@ -408,7 +411,7 @@
-
+
@@ -416,8 +419,8 @@
-
-
+
|
+ | |
Default: same value as the Sendmail setting
Sendmail2 is provided for exim users. It is the command
@@ -433,7 +436,7 @@
-
+
| |
Max Unscanned Bytes Per Scan |
@@ -441,8 +444,8 @@
-
-
+
|
+ | |
Default: 100000000
MailScanner handles messages in batches for efficiency.
@@ -460,7 +463,7 @@
-
+
| |
Max Unsafe Bytes per Scan |
@@ -468,8 +471,8 @@
-
-
+
|
+ | |
Default: 50000000
This setting limits the total size of messages per batch
@@ -480,7 +483,7 @@
-
+
| |
Max Unscanned Messages Per Scan |
@@ -488,8 +491,8 @@
-
-
+
|
+ | |
Default: 100
This setting limits the total number of messages per
@@ -501,7 +504,7 @@
-
+
| |
Max Unsafe Messages per Scan |
@@ -509,8 +512,8 @@
-
-
+
|
+ | |
Default: 100
This setting limits the total number of messages per
@@ -522,7 +525,7 @@
-
+
@@ -530,8 +533,8 @@
-
-
+
|
+ | |
Default: yes
TNEF is primarily used by Microsoft programs such as
@@ -551,7 +554,7 @@
-
+
@@ -559,8 +562,8 @@
-
-
+
|
+ | |
Default: no
Rich Text format attachments produced by some versions of
@@ -578,7 +581,7 @@
-
+
@@ -586,8 +589,8 @@
-
-
+
|
+ | |
Default: /opt/MailScanner/bin/tnef
Default FreeBSD: /usr/local/bin/tnef
@@ -601,7 +604,7 @@
-
+
@@ -609,8 +612,8 @@
-
-
+
|
+ | |
Default: 120
The maximum length of time (in seconds) the TNEF Expander
@@ -621,7 +624,7 @@
-
+
@@ -629,8 +632,8 @@
-
-
+
|
+ | |
Default: /usr/bin/file
Where the "file" command is installed. This is
@@ -643,7 +646,7 @@
-
+
@@ -651,8 +654,8 @@
-
-
+
|
+ | |
Default: 20
The maximum length of time the "file" command
@@ -664,7 +667,7 @@
-
+
@@ -672,8 +675,8 @@
-
-
+
|
+ | |
Default: no
This is inteded for use with a ruleset to ensure that
@@ -687,7 +690,7 @@
-
+
| |
Block Unencrypted Messages |
@@ -695,8 +698,8 @@
-
-
+
|
+ | |
Default: no
This is intended for use with a ruleset to ensure that
@@ -709,7 +712,7 @@
-
+
@@ -717,8 +720,8 @@
-
-
+
|
+ | |
Default: 0
The maximum size of any message including the headers. If
@@ -735,7 +738,7 @@
-
+
| |
Allowed Sophos Error Messages |
@@ -743,24 +746,34 @@
-
-
+
|
+ | |
Default:
Anything on the next line that appears in brackets at the
end of a line of output from Sophos will cause the
error/infection to be ignored. Use of this option is
dangerous, and should only be used if you are having trouble
-with lots of corrupt PDF files, for example. Example:
+with lots of corrupt PDF files, for example. This option
+allows for multiple strings as well. In this case, the
+strings should be put in double quotes (") and each
+string separated with commas. Examples:
Allowed Sophos Error Messages = corrupt format not
-supported
+supported
+Allowed Sophos Error Messages = "corrupt",
+"format not supported"
+
+The first version will match "corrupt format not
+supported" only. The second version will match
+"corrupt" and "format not
+supported".
|
-
+
@@ -768,8 +781,8 @@
-
-
+
|
+ | |
Default: /usr/local/Sophos/ide
The directory (or a link to it) containing all the Sophos
@@ -781,7 +794,7 @@
-
+
@@ -789,8 +802,8 @@
-
-
+
|
+ | |
Default: /usr/local/Sophos/lib
The directory (or a link to it) containing all the Sophos
@@ -803,7 +816,7 @@
-
+
| |
Monitors For Sophos Updates |
@@ -811,8 +824,8 @@
-
-
+
|
+ | |
Default: /usr/local/Sophos/ide/*ides.zip
SophosSAVI only: monitor each of these files for changes
@@ -828,7 +841,7 @@
-
+
@@ -836,8 +849,8 @@
-
-
+
|
+ | |
Default: yes
Do you want to scan email for viruses? A few people
@@ -856,7 +869,7 @@
-
+
@@ -864,8 +877,8 @@
-
-
+
|
+ | |
Default: none
Which Virus Scanning package to use. Possible choices are
@@ -888,7 +901,7 @@
-
+
@@ -896,8 +909,8 @@
-
-
+
|
+ | |
Default: 300
The maximum time (in seconds) that the cirus scanner is
@@ -908,7 +921,7 @@
-
+
| |
Deliver Disinfected Files |
@@ -916,8 +929,8 @@
-
-
+
|
+ | |
Default: yes
Should infected attached documents be automatically
@@ -928,7 +941,7 @@
-
+
@@ -936,8 +949,8 @@
-
-
+
|
+ | |
Default: Klez Yaha−E Bugbear Braid−A
WinEvar
@@ -951,20 +964,23 @@
fake addresses on messages they send, so there is no point
informing the sender of the message, as it won’t
actually be them who sent it anyway. Other words that can be
-put in this list are the 2 special keywords
+put in this list are the 3 special keywords
HTML−IFrame: inserting this will stop senders being
warned about HTML Iframe tags, when they are not
allowed.
HTML−Codebase: inserting this will stop senders being
warned about HTML Object Codebase tags, when they are not
-allowed.
+allowed.
+All−Viruses: inserting this will stop senders being
+warned about any virus, while still allowing you to warn
+senders about HTML−based attacks.
|
-
+
| |
Still Deliver Silent Viruses |
@@ -972,8 +988,8 @@
-
-
+
|
+ | |
Default: yes
If this is set to yes then disinfected messsages that
@@ -993,7 +1009,7 @@
-
+
@@ -1001,8 +1017,8 @@
-
-
+
|
+ | |
Default: no
Do you want to allow partial messages, which only contain
@@ -1020,7 +1036,7 @@
-
+
| |
Allow External Message Bodies |
@@ -1028,8 +1044,8 @@
-
-
+
|
+ | |
Default: no
There is a mechanism, very rarely used, in which the body
@@ -1049,7 +1065,7 @@
-
+
@@ -1057,8 +1073,8 @@
-
-
+
|
+ | |
Default: no
Do you want to allow HTML <IFrame> tags in email
@@ -1073,7 +1089,7 @@
-
+
@@ -1081,8 +1097,8 @@
-
-
+
|
+ | |
Default: no
You may receive complaints from your users that HTML
@@ -1100,7 +1116,7 @@
-
+
| |
Allow Object Codebase Tags |
@@ -1108,8 +1124,8 @@
-
-
+
|
+ | |
Default: no
Do you want to allow HTML <Object Codebase=...>
@@ -1123,7 +1139,7 @@
-
+
| |
Convert Dangerous HTML To Text |
@@ -1131,8 +1147,8 @@
-
-
+
|
+ | |
Default: no
When <IFrame> or <Object Codebase=...> HTML
@@ -1149,7 +1165,7 @@
-
+
@@ -1157,8 +1173,8 @@
-
-
+
|
+ | |
Default: no
If you have users who are children, or who are offended
@@ -1175,7 +1191,7 @@
-
+
@@ -1183,8 +1199,8 @@
-
-
+
|
+ | |
Default: no
Do you want to allow <Form> tags in email messages?
@@ -1200,7 +1216,7 @@
-
+
@@ -1208,8 +1224,8 @@
-
-
+
|
+ | |
Default: /opt/MailScanner/etc/filename.rules.conf
Default Linux: /etc/MailScanner/filename.rules.conf
Default FreeBSD:
@@ -1226,7 +1242,7 @@
-
+
@@ -1234,8 +1250,8 @@
-
-
+
|
+ | |
Default: /opt/MailScanner/etc/filetype.rules.conf
Default Linux: /etc/MailScanner/filetype.rules.conf
Default FreeBSD:
@@ -1257,7 +1273,7 @@
-
+
@@ -1265,8 +1281,8 @@
-
-
+
|
+ | |
Default: yes
Set this to store infected / dangerous attachments in
@@ -1280,7 +1296,7 @@
-
+
@@ -1288,8 +1304,8 @@
-
-
+
|
+ | |
Default: no
When an infected message is stored in the quarantine, a
@@ -1301,7 +1317,7 @@
-
+
| |
Quarantine Whole Messages As Queue Files |
@@ -1309,8 +1325,8 @@
-
-
+
|
+ | |
Default: no
When an entire message is saved in the quarantine for any
@@ -1329,7 +1345,7 @@
-
+
@@ -1337,8 +1353,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/languages.conf
Default Linux:
@@ -1356,7 +1372,7 @@
-
+
| |
Deleted Bad Filename Message Report |
@@ -1364,8 +1380,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/deleted.filename.message.txt
Default Linux:
@@ -1384,7 +1400,7 @@
-
+
| |
Deleted Virus Message Report |
@@ -1392,8 +1408,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/deleted.virus.message.txt
Default Linux:
@@ -1412,7 +1428,7 @@
-
+
| |
Stored Bad Filename Message Report |
@@ -1420,8 +1436,8 @@
-
-
+
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/stored.filename.message.txt
Default Linux:
@@ -1429,10 +1445,65 @@
Default FreeBSD:
/usr/local/share/MailScanner/reports/en/stored.filename.message.txt
-When an attachment is deleted from a message (and the
-attachment has been stored in the quarantine) because the
-filename failed the filename rules in force for the message,
-it is replaced by the contents of this file. A few variable
+ When an attachment is deleted and stored from a message
+(and the attachment has been stored in the quarantine)
+because the filename failed the filename rules in force for
+the message, it is replaced by the contents of this file. A
+few variable substitutions can be made in this file, an
+example of each of which is contained in the supplied sample
+file.
+ |
+
+
+
+
+
+ |
+ Deleted Bad Content Message Report |
+
+
+
+
+
+ |
+ Default:
+/opt/MailScanner/etc/reports/en/deleted.content.message.txt
+Default Linux:
+/etc/MailScanner/reports/en/deleted.content.message.txt
+Default FreeBSD:
+/usr/local/share/MailScanner/reports/en/deleted.content.message.txt
+
+This report is sent when a message is deleted because it
+contained bad or dangerous content. A few variable
+substitutions can be made in this file, an example of each
+of which is contained in the supplied sample file.
+ |
+
+
+
+
+
+ |
+ Stored Bad Content Message Report |
+
+
+
+
+
@@ -1441,7 +1512,7 @@
|
+ Default:
+/opt/MailScanner/etc/reports/en/stored.content.message.txt
+Default Linux:
+/etc/MailScanner/reports/en/stored.content.message.txt
+Default FreeBSD:
+/usr/local/share/MailScanner/reports/en/stored.content.message.txt
+
+This report is sent when a message is stored because it
+contained bad or dangerous content. A few variable
substitutions can be made in this file, an example of each
of which is contained in the supplied sample file.
|
-
+
@@ -1449,8 +1520,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/disinfected.report.txt
Default Linux:
@@ -1470,7 +1541,7 @@
-
+
@@ -1478,8 +1549,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/inline.sig.html
Default Linux:
@@ -1501,7 +1572,7 @@
-
+
@@ -1509,8 +1580,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/inline.sig.txt
Default Linux:
@@ -1532,7 +1603,7 @@
-
+
@@ -1540,8 +1611,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/sender.error.report.txt
Default Linux:
@@ -1561,7 +1632,7 @@
-
+
| |
Sender Bad Filename Report |
@@ -1569,8 +1640,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/sender.filename.report.txt
Default Linux:
@@ -1579,14 +1650,14 @@
/usr/local/share/MailScanner/reports/en/sender.filename.report.txt
When an attachment is trapped by the filename rules, this
-message is sent back to the sender. :
+message is sent back to the sender.
|
-
+
@@ -1594,8 +1665,8 @@
-
-
+
|
+ | |
Default:
/opt/MailScanner/etc/reports/en/sender.virus.report.txt
Default Linux:
@@ -1611,7 +1682,7 @@
-
+
@@ -1619,8 +1690,8 @@
-
-
+
|
+ | |
Default: yes
When this option is set, the full directory in which the
@@ -1633,7 +1704,7 @@
-
+
| |
Include Scanner Name in Reports |
@@ -1641,14 +1712,20 @@
-
-
+
|
- Default: no
+ | |
+ Default: yes
Include the name of the virus scanner in each of the
-scanner reports. Very useful if you use several virus
-scanners, but a bad idea if you don’t want to let your
-customers know which scanners you use.
+scanner reports. This also includes the translation of
+"MailScanner" in each of the report lines
+resulting from one of MailScanner’s own checks such as
+filename, filetype or dangerous HTML content. To change the
+name "MailScanner", look in
+reports/...../languages.conf.
+Very useful if you use several virus scanners, but a bad
+idea if you don’t want to let your customers know
+which scanners you use.
|
@@ -1657,7 +1734,7 @@
-
+
@@ -1665,8 +1742,8 @@
-
-
+
|
+ | |
Default: X−MailScanner:
Extra header that should be added to all scanned messages
@@ -1679,7 +1756,7 @@
-
+
@@ -1687,8 +1764,8 @@
-
-
+
|
+ | |
Default: X−MailScanner−SpamCheck:
Name of the header to add to mail detected as spam. The
@@ -1700,7 +1777,7 @@
-
+
@@ -1708,8 +1785,8 @@
-
-
+
|
+ | |
Default: X−MailScanner−SpamScore:
If the option "Spam Score" is set, this is the
@@ -1721,7 +1798,7 @@
-
+ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |