RE: Default File Checking Rule Issues

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

RE: Default File Checking Rule Issues

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Web & Mail Security] >> GFI MailSecurity >> RE: Default File Checking Rule Issues

Page: << < prev 1 [2] 3 4 next > >>

Message

<< Older Topic Newer Topic >>

RE: Default File Checking Rule Issues - 2.Oct.2003 1:22:00 PM

ctsmiths

Posts: 43
Joined: 2.Jun.2003
Status: offline

Anybody tried this yet ? It looks to me that that will turn off all attachment checking ???

(in reply to ctsmiths)

Post #: 16

RE: Default File Checking Rule Issues - 2.Oct.2003 2:40:00 PM

fnbaiss

Posts: 127
Joined: 19.Sep.2003
From: USA
Status: offline

I'm going to try it this weekend.

(in reply to ctsmiths)

Post #: 17

RE: Default File Checking Rule Issues - 7.Oct.2003 12:14:00 PM

mrc

Posts: 148
Joined: 20.May2003
Status: offline

Anybody happen to test this yet?

(in reply to ctsmiths)

Post #: 18

RE: Default File Checking Rule Issues - 13.Oct.2003 11:06:00 AM

fnbaiss

Posts: 127
Joined: 19.Sep.2003
From: USA
Status: offline

Had too many fires to put out last weekend so tried it yesterday and it didn't work.

(in reply to ctsmiths)

Post #: 19

RE: Default File Checking Rule Issues - 13.Oct.2003 4:40:00 PM

ctsmiths

Posts: 43
Joined: 2.Jun.2003
Status: offline

Well.....20031006 is out, I guess it's worth a shot. Also alot of email today from GFI about attachment checking issues. I hate to be installing releases the same day they come out....

(in reply to ctsmiths)

Post #: 20

RE: Default File Checking Rule Issues - 13.Oct.2003 4:49:00 PM

mrc

Posts: 148
Joined: 20.May2003
Status: offline

fnbaiss - Thanks for trying it out anyway.

Rick - Me too, I think I'll wait just a bit before installing the latest release... [Wink]

Mike

(in reply to ctsmiths)

Post #: 21

RE: Default File Checking Rule Issues - 13.Oct.2003 6:19:00 PM

fnbaiss

Posts: 127
Joined: 19.Sep.2003
From: USA
Status: offline

I was using that new release this weekend when I tested the registry change.

(in reply to ctsmiths)

Post #: 22

RE: Default File Checking Rule Issues - 16.Oct.2003 4:51:00 AM

alucas

Posts: 28
Joined: 28.Sep.2003
From: UK
Status: offline

Odd, I've upgraded to the latest build and for some reason, Mail Security is telling me that LOGO.TIF is breaching the file attachment rules even though .TIF files are not listed in the blocked attachments...

[Frown]

(in reply to ctsmiths)

Post #: 23

RE: Default File Checking Rule Issues - 16.Oct.2003 9:38:00 AM

jrh369

Posts: 47
Joined: 24.Sep.2003
From: Evansville, Indiana
Status: offline

I've been fighting with this issue since I installed the previous version over a month ago.

I get emails blocked for many reasons:

htm thinks its a txt
txt thinks its htm
doc thinks its rtf
doc thinks its txt
doc thinks its xls
txt thinks it doc

and so on and so on.

I can't understand this rule because unless it mistakenly thinks the file is a type which is on my "Blocked Types" list I don't think it should try and help me out.

There are enough other rules checking the files for violations that I think we can lighten up on this on.

(in reply to ctsmiths)

Post #: 24

RE: Default File Checking Rule Issues - 17.Oct.2003 3:36:00 AM

DanielSchell

Posts: 179
Joined: 16.Oct.2003
From: Adelaide, Australia
Status: offline

Hopefully this will clear things up:

New GFI MailSecurity 8 build (20031006) uploaded
http://kbase.gfi.com/showarticle.asp?id=KBID001831

Addresses and issue where:
Certain documents DOC were being detected as XLS files; the reason was that the documents had some missing signature data in them - fixed

But regarding the issues that are occuring in this thread:

The registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\GFI FAX & VOICE\GFIAV\Ext\AttachChecker\BlockFiles_ViaExtAssociations

Is used to block files such as *.JPEG if only *.JPG is in the blocked attachment list. Setting this to 0 will disable this type of checking (not really relevant in this case).

You can make exclusions for individual incorrect detections which may be occuring as follows:

Eg.

Scenario: A .DOC detected as .TXT and was blocked due to possible renaming:

1. Browse to HKEY_LOCAL_MACHINE\SOFTWARE\GFI FAX & VOICE\GFIAV\Ext\FileTypeChecker\KnownTypes

2. Find the value of the extension type that MailSecurity is detecting it as (In this case TXT = 1)

3. Browse to HKEY_LOCAL_MACHINE\SOFTWARE\GFI FAX & VOICE\GFIAV\Ext\AttachChecker\BlockByAssocExceptions

4. Create a new DWORD with the extension of the file type being blocked (in this case DOC) and set the value to be the value (1) found in step 2.

5. Restart the SMTPSVC

In the past I have seen JPG files which were created on a Mac detect as TXT, and also DOC files created by an non-ms product suite detect incorrectly. I am sure the developers are working on detecting more file types from different products correctly.

Hopefully this has helped out.

Regards,
Daniel Schell - GFI Asia Pacific

(in reply to ctsmiths)

Post #: 25

RE: Default File Checking Rule Issues - 31.Oct.2003 9:39:00 AM

Hiler

Posts: 3
Joined: 29.Oct.2003
Status: offline

Is this the definitive answer to this problem?
What do you do for DOC files where some are being detected as txt and some as rtf. Windows won't let you have 2 keys with the same name?

(in reply to ctsmiths)

Post #: 26

RE: Default File Checking Rule Issues - 31.Oct.2003 1:59:00 PM

mrc

Posts: 148
Joined: 20.May2003
Status: offline

As discussed, changing the following registry key to zero, will disable this type of checking;

HKEY_LOCAL_MACHINE\SOFTWARE\GFI FAX & VOICE\GFIAV\Ext\AttachChecker\BlockFiles_ViaExtAssociations

One more question though, with all this registry editing to resolve issues. When it comes time for a regular build update, which is really an uninstall and reinstall. Do the changed registry values remain, or do they have to be edited again?

Mike

(in reply to ctsmiths)

Post #: 27

RE: Default File Checking Rule Issues - 1.Nov.2003 7:50:00 AM

Kevinl

Posts: 9
Joined: 31.Oct.2003
From: Bahrain
Status: offline

Why is this check even in there if it doesn't work properly?
Surely the answer isn't just to turn it off, but for GFI to fix it?

(in reply to ctsmiths)

Post #: 28

RE: Default File Checking Rule Issues - 4.Nov.2003 10:34:00 PM

brendanh

Posts: 1
Joined: 27.Aug.2003
From: Sydney
Status: offline

HKEY_LOCAL_MACHINE\SOFTWARE\GFI FAX & VOICE\GFIAV\Ext\AttachChecker\BlockFiles_ViaExtAssociations

Changing this key does not address this issue in ME8. I promise.

(in reply to ctsmiths)

Post #: 29

RE: Default File Checking Rule Issues - 5.Nov.2003 8:50:00 AM

Hiler

Posts: 3
Joined: 29.Oct.2003
Status: offline

I tried setting that key to 0 on version 8 build 1006. I rebooted the server after the change just to make sure MailSecurity would pick up the change, and not 2 hours later it blocked a DOC file because it thought it was a txt file. Grrrrr. I guess I'm just going to turn the attachment checking module off and just rely on the virus scanner. Maybe someday GFI will fix it.

Craig Barnhart
IT Manager
Hiler Industries

(in reply to ctsmiths)

Post #: 30