Subject: Re: [anomy-list]: S/MIME
Message-ID: <4058DA2B.5030202@guzman.at>
Date: Thu, 18 Mar 2004 00:07:23 +0100
From: Hannes Gruber <hg@guzman.at>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113
To: anomy-list@mailtools.anomy.net
References: <4052F814.3030508@guzman.at> <1079443599.657.50.camel@duff.e-spirit.de>  <4057040A.3040103@guzman.at> <1079453901.657.86.camel@duff.e-spirit.de>
In-Reply-To: <1079453901.657.86.camel@duff.e-spirit.de>
Content-Type: text/plain; charset="iso-8859-1"

Ave,

> Sanitizer 1.66 (Sanitizer.pm,v 1.82) does not add anything which
> destroys the signature if /etc/sanitizer.cfg contains the following
> lines and of course /usr/bin/sanitizer is called with parameter
> /etc/sanitizer.cfg in the exim-filter configuration (which I overlooked
> at first).
> 
> feat_boundaries     = 0
> feat_trust_pgp      = 0

I was verry positive when I read this, but unfortunately both of those
are set.

> Hannes, with feat_bounderies S/MIME should also work. If not, post the
> attached sanitizer.log of the invalied S/MIME msg.

YES! this helped me to recive the Encrypted messages. I had to add the 
following part to the accept regEx:

file_list_2 += |p7m

Now I can recive encrypted messages flawlessly.

It did not help for signed messages. The signature still is violated. 
Unfortunately there is no LOG File created if the message is just signed 
and not encrypted.

I have attatched my configuration file if someone is intrested in.

Hannes


-- 
--<>-------------------------------------------
Zufallszitat:
"Mit der Zeit wird aus jedem spitzen Felsen ein runder Flusskiesel" -
Hannes Gruber

                !!! www.usw.at !!!
         nimm die Herausforderung an


feat_verbose = 1

feat_log_inline = 0

feat_log_stderr = 1

feat_log_xml = 0

feat_log_trace = 0

feat_log_after = 0

feat_files = 1

feat_force_name = 0

feat_boundaries = 0

feat_lengths = 1

feat_scripts = 1

feat_html = 1

feat_webbugs = 0

feat_trust_pgp = 0

feat_uuencoded = 1

feat_forwards = 1

feat_testing = 0

feat_fixmime = 1

feat_paranoid = 0

score_bad = 0

file_name_tpl = /var/mailquarantine//$F.$$$

header_info = X-Sanitizer: This message has been sanitized!
header_info += \nX-Sanitizer: Provided by GUZMAN el bueno

header_url = 0

msg_file_save = \n\n*************************************************************
msg_file_save += \n\n                **** Attached file removed ****\n
msg_file_save += \n  An attachment was removed from this part of the message,
msg_file_save += \n  because it failed one or more checks by the virus scanning
msg_file_save += \n  system provided by the GUZMAN Server System.
msg_file_save += \n
msg_file_save += \n  The removed attachment's name was:
msg_file_save += \n
msg_file_save += \n          %FILENAME
msg_file_save += \n
msg_file_save += \n  It is recommended that you contact your GUZMAN system
msg_file_save += \n  administrator if you need access to the file.
msg_file_save += \n  It is possible to recover the file '%SAVEDNAME'
msg_file_save += \n  within the next 7 days.
msg_file_save += \n*************************************************************\n\n

msg_defanged = DANGER

msg_pgp_warning = PGP encrpted content follows and has not been sanitized. \n

file_default_policy = defang

file_list_rules = 2

file_list_1_scanner = 0
file_list_1_policy = save
file_list_1 = (?i)(winmail.dat)|
file_list_1 += (\.(exe|com|vb[se]|dll|ocx|cmd|bat|pif|lnk|hlp|ms[ip]|reg|sct|inf
file_list_1 += |asd|cab|sh[sb]|scr|cpl|chm|ws[fhc]|hta|vcd|vcf|eml|nws))$

file_list_2_scanner = 0
file_list_2_policy = accept
file_list_2 = (?i)\.
file_list_2 += (doc|dot|txt|rtf|pdf|ps|htm|[sp]?html?
file_list_2 += |xls|xlw|xlt|csv|wk[1-4]
file_list_2 += |p7m
file_list_2 += |ppt|pps|pot
file_list_2 += |jpe?g|gif|png|tiff?|bmp|psd|pcx|jpg
file_list_2 += |vsd|drw|cdr|swf
file_list_2 += |mp3|avi|mpe?g|mov|ram?|mid|ogg
file_list_2 += |zip|g?z|rar|tgz|bz2|tar
file_list_2 += |[ch](pp|\+\+)?|s|inc|asm|patch|java|php\d?|jsp|bas)


- 8< - - -
This mailing list's home page is: http://mailtools.anomy.net/archives/anomy-list/
There you can find subscription instructions and possibly an archive.
Molar.is is a free Icelandic mailing list service.
- - - >8 -