Problem with filename.rules.conf

[dzamanakos]

Hi, today i've noticed that an email passed with a .jar attachment.

In my configuration i have:
File "Attachment checking" enabled
Default for virus scanning = yes

In mailscanner configuration i've the default setting for
Filename Rules = %rules-dir%/filename.rules.rules

with :

From: 127.0.0.1 and From: postmaster@domain.com /usr/mailscanner/etc/filename.no.rules.conf # postmaster
FromOrTo: default /usr/mailscanner/etc/filename.rules.conf


and in filename.rules.conf i have :
deny \.jar$ Possible java virus Java files are often malicious

but when i send, or someone send me a ,jar file it's passing to inbox.
What can i check?
best regards,

[sawbuck]

Are the entries in filename.rules.conf separated by "tabs" and not just spaces?

Did you reload MS after making rule changes?

[dzamanakos]

It was a space.
Thank you for your help.

Best regards,

[Poojakhana]

I had the same issue..Excellent answer. Thanks for this sharing!