Does anyone have any experience with CSF mailscanner

[keat63]

Guys

Does anyone have any experience with CSF mail Scanner FE.
I'm getting no where on thier forum, and I've a situatin that's driving me nuts.

Our server is under some form of virus attack at the moment.
I've put things in place to protect us, however, mailscanner is sending the below message to my recipients when I virus or nbanned file has been stripped out.
I can't for the life of me figure out where to switch this off.

The original e-mail attachment "INVOICE.zip"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Wed May 18 15:28:28 2022 the virus scanner said:
MailScanner: Eudora *.lnk security hole attack (4INVOICE.lnk)

Note to Help Desk: Look on The cPanel () MailScanner in /var/spool/MailScanner/quarantine/20220518 (message 1nrKf4-0004hc-E2).
--

 

[keat63]

Folks

I think found this, it looks like a ruleset may be over riding the actual config gui.

 

[cPRex]

I'm glad you were able to find a possible solution. Since cPanel doesn't do anything with Mailscanner on our end I didn't have much to add yesterday, but I'll still leave this marked as "new" for you in case other users want to share their experience.