Whitelist excel sheet with macros from one email to another

Discussion in 'Installation/Configuration' started by rob_morin, May 30, 2018.

  1. rob_morin

    rob_morin Member

    Here is policy

    shorner-2.PNG
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    a) The domain of that mailbox is the same domain that is emntioned in the log? or is it an alias domain that just points to the same mailbox?

    b) Is this a multiserver system? If yes, then maybe the setting has not been synced with the slave.
     
  3. rob_morin

    rob_morin Member

    Yes the domain is the same, and it is not an alias.
    Yes this is a multi server setup, one mail server, one databseserver(also dns), one web server.

    In the dbispconfig database The policy setting is set to 4 for her mailbox and policy ID for wants viruses is 4
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    You checked that on the slave, not the master?
     
  5. rob_morin

    rob_morin Member

    The mail server is using its local mysql server for mail settings.

    conf.d/50-user: ( ['DBI:mysql:database=dbispconfig;host=127.0.1.1;port=3306',
     
  6. rob_morin

    rob_morin Member

    FYI i modified on the mail server, clamd.conf
    from OLE2BlockMacros true
    to
    OLE2BlockMacros false

    And the file now goes through, but thats for everyone now...
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    Correct, and that's why I asked if you checked the database on the slave or master as the policy settings on the slave are the ones that matter for spam filtering and it might be that they differ between master and slave.
     
  8. ztk.me

    ztk.me ISPConfig Developer ISPConfig Developer

    http://lists.clamav.net/pipermail/clamav-users/2016-August/003314.html


    macros appear not to be spam nor virus, thus tweaking won't work imho
     

Share This Page