[Esd-l] Sanitizer works for all except a few
crothbauer at intagio.com
Tue Jul 16 08:20:08 PDT 2002
No, all users are outlook users. I use outlook, as do the rest of my
users (including the test group). When the attachment is stripped by
sanitizer, we get notices. When the attachment doesn't get stripped by
sanitizer, it still gets stripped by outlook. I only included that as
evidence of the fact that sanitizer failed for these users.
The problem is that in 1/4 of the people so far, sanitizer fails to
strip attachments. I am using an /etc/procmailrc to control it and no
users have .forward or .procmailrc files so if it works for 3/4, it
should work for the other 1/4, which is where it's failing.
From: Mark_Saunders [mailto:Mark_Saunders at piucorp.com]
Sent: Tuesday, July 16, 2002 10:11 AM
To: Chris Rothbauer
Cc: esd-l at spconnect.com
Subject: Re: [Esd-l] Sanitizer works for all except a few
I believe you're saying that only Outlook users are getting attachments
stripped... If this is the case, Outlook's latest "security" feature is
to deny access to specific file types. There is a registry hack that
overrides this functionality. You can read about it here:
Outlook doesn't have the ability to look at the raw message, like
Netscape does...if it did, you'd probably notice that the message
actually contains the data you can't access.
Chris Rothbauer wrote:
> I just installed procmail and sanitizer to strip all unwanted
> attachments from inbound email. Very nice tool, by the way. I have it
> working across my initial test group except for two people (about a
> 25% failure rate). We use Outlook 2000 client against Solaris 2.6,
> Sendmail 8.11.6, procmail 3.15.2, and Sanitizer 1.135.
> The two who received "stripped" files (outlook strips them) have
> different shells (/bin/false, and /bin/bash), don't have .forward
> files or .procmailrc files, and I have removed their .profile and
> .bashrc files.
> The log entries for my procmail.log (mine works) and theirs are
> I am running out of ideas. Any thoughts on where I can look?
> Esd-l mailing list
> Esd-l at spconnect.com http://www.spconnect.com/mailman/listinfo/esd-l
mv $win /dev/null
More information about the esd-l