No programs allowed .dwg

[thbor83]

Hello

We run ubuntu 14.04 with Postfix and Mailscanner installed for scanning our emails.
Today we received an email from one of our users about and email containing .dwg files in a zipped file.

This email had been blocked in the Mailscanner with the message MailScanner: No programs allowed (113B0K21.dwg)

As before we added some new rules to both filename.rules.conf and filetype.rules.conf

filename.rules.conf

allow \.dwg - -

filetype.rules.conf

allow dwg application/dwg -
allow dwg application/acad -
allow dwg image/vnd.dwg -
allow dwg image/x-dwg -

After restarting the service and trying again we still experience the same problem.
We asked the user to send this files as single files, this wasn't any problems. Then the files go through.
Also asked the user to repack the zip file without the file mentioned before, then the file also was delivered succesfully.

Does anyone know what kind of configuration we are missing here? This is the first time we see this problem but we don't know if this has happened before without the users let us know about it.

Thanks!

Thomas

[Sarah]

You probably need to add the same lines to archives.filetype.rules.conf and archives.filename.rules.conf.

[thbor83]

Tried to add the same lines to the archive files without any luck.
The message is still MailScanner: No programs allowed (113B0K21.dwg)

It's strange that it's only the one file that keeps blocking the zip file, but when sending it alone it works fine.

[Sarah]

If you don't want different rules for archives and non-archives, you could simply set them to the same rule file in the mailscanner configuration and see if that helps. I.e., set "Archives: Filename Rules" and "Archives: Filetype Rules" to exactly what you have for "Filename Rules" and "Filetype Rules". If that doesn't work you'll need to go through the mailscanner configuration and check all the settings relating to unpacking and scanning archives, if you haven't already done so.