EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: pwizard on Monday 07 June 2010, 01:00:17 pm



Title: How to bypass banned file ??
Post by: pwizard on Monday 07 June 2010, 01:00:17 pm
Dear all;
I used endian 2.2 , I set SMTP proxy to scanfile .For detail see attached file.

How to bypass file send to receiver ??


No viruses were found.

A banned name (multipart/mixed | application/msword,.doc,=?iso-2022-jp?B?GyRCJTMlcyVUJWUhPCU/PWhNfTRENi0kTkdEMC4bKEIu?= =?iso-2022-jp?B?ZG9j?=,$B%3%s%T%e!<%?=hM}4D6-$NGD0.(B.doc) was found.


The mail originated from: <xxxxx@xxxx.co.jp>

According to the 'Received:' trace, the message originated at:
   JPTYO0421.atrapa.deloitte.com [10.47.2.41]

The message WILL NOT BE delivered to:
<xxxxx@.com>:
   250 2.7.0 Ok, discarded, id=05270-08 - BANNED: multipart/mixed | application/msword,.doc,=?iso-2022-jp?B?GyRCJTMlcyVUJWUhPCU/PWhNfTRENi0kTk...

The message has been quarantined as:
   banned-Okh1sEzhxmrs


Title: Re: How to bypass banned file ??
Post by: deadmalc on Wednesday 16 June 2010, 06:41:00 pm
There is a bypass transparent proxy option for to and from (IP/subnet only)