[Postfix-es] Ke es esto

[Martin Araya]

Me parece que es n mensaje del amavis-new , revisa si tienes corriendo 
el amavisd

Fabian Donoso C. escribió:

> Estuve tratando de enviar un archivo *.exe desde mi correo y me llego 
> un mail, que no es precisamente de la configuración del body_checks. 
> Hay un filtro funcionando y no se cual es, ¿alguien me puede decir 
> cual es y donde se configura?
>
> Llego con el nombre de: Content-filter
>
> Y con este asunto: BANNED (P=p006,L=1,M=multipart/mixed | 
> P=p005,L=1/3,M=application/x-msdownload,T=exe,T=exe-ms,N=Serpiente.exe) 
> IN MAIL FROM YOU
>
> Con este contenido:
>
> BANNED CONTENTS ALERT
>
> Our content checker found
>
> banned name: P=p005,L=1,M=multipart/mixed | 
> P=p004,L=1/2,M=application/x-msdownload,T=exe,T=exe-ms,N=Serpiente.exe
>
> in email presumably from you (<fdonoso en lapreferida.cl>),
>
> to the following recipient:
>
> -> fdonosoc en yahoo.es
>
> Our internal reference code for your message is 02746-02.
>
> Delivery of the email was stopped!
>
> The message has been blocked because it contains a component (as a 
> MIME part or nested within) with declared name or MIME type or 
> contents type violating our access policy.
>
> To transfer contents that may be considered risky or unwanted by site 
> policies, or simply too large for mailing, please consider publishing 
> your content on the web, and only sending an URL of the document to 
> the recipient.
>
> Depending on the recipient and sender site policies, with a little 
> effort it might still be possible to send any contents (including
>
> viruses) using one of the following methods:
>
> - encrypted using pgp, gpg or other encryption methods;
>
> - wrapped in a password-protected or scrambled container or archive
>
> (e.g.: zip -e, arj -g, arc g, rar -p, or other methods)
>
> Note that if the contents is not intended to be secret, the encryption 
> key or password may be included in the same message for recipient's 
> convenience.
>
> We are sorry for inconvenience if the contents was not malicious.
>
> The purpose of these restrictions is to cut the most common 
> propagation methods used by viruses and other malware. These often 
> exploit automatic mechanisms and security holes in certain mail 
> readers (Microsoft mail readers and browsers are a common and easy 
> target). By requiring an explicit and decisive action from the 
> recipient to decode mail, the dangers of automatic malware propagation 
> is largely reduced.
>
> For your reference, here are headers from your email:
>
> ------------------------- BEGIN HEADERS -----------------------------
>
> Return-Path: <fdonoso en lapreferida.cl>
>
> Received: from soporte (unknown [89.0.0.106])
>
> by mail.lapreferida.cl (Postfix) with ESMTP id E998837771
>
> for <fdonosoc en yahoo.es>; Tue, 21 Dec 2004 15:48:16 -0300 (CLST)
>
> Reply-To: <fdonoso en lapreferida.cl>
>
> From: "Fabian Donoso C." <fdonoso en lapreferida.cl>
>
> To: <fdonosoc en yahoo.es>
>
> Subject:
>
> Date: Tue, 21 Dec 2004 15:41:37 -0300
>
> Organization: Cecinas La Preferida S.A.
>
> Message-ID: <001901c4e78c$b3eedcf0$6a000059 en soporte>
>
> MIME-Version: 1.0
>
> Content-Type: multipart/mixed;
>
> boundary="----=_NextPart_000_001A_01C4E773.8EA1A4F0"
>
> X-Priority: 3 (Normal)
>
> X-MSMail-Priority: Normal
>
> X-Mailer: Microsoft Outlook, Build 10.0.6626
>
> Importance: Normal
>
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>
> -------------------------- END HEADERS ------------------------------
>
> :::::::::::::::::::::::::::::::::::::::::::::
>
> //Fabián Donoso C.//
>
> //Soporte Computacional//
>
> //ATC-////Cecinas//// La Preferida S.A.//
>
> //Fono: 3911075//
>
> //mailto: fdonoso en lapreferida.cl <mailto:fdonoso en lapreferida.cl>//
>
> //mailto: soporte en lapreferida.cl <mailto:soporte en lapreferida.cl>//
>
>------------------------------------------------------------------------
>
>_______________________________________________
>List de correo Postfix-es
>Postfix-es en lists.wl0.org
>http://lists.wl0.org/mailman/listinfo/postfix-es
>  
>

-- 
Martin Araya Fídel
CERTICOM S.A.C
4425010 Anexo 123