Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 3054 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Extension blocking skipping not work if the blocked file extension is inside zip file

Jeremy Lo

The target is to send an outgoing email with an zip email attachment with .js file inside.

Then receive an auto reply email from UTM 9

Your message to the following recipients was quarantined:

quarantine reason: File Extension (js)

Please contact your IT administrator for further assistance.

The strange thing is if the .js file is not inside the zip file. The email won't be block.

I already set the Extension blocking exception. What else can I do?



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Jeremy, and welcome to the UTM Community!

    Are you saying that an email with a .js inside a zip file is blocked while one that simply has a .js attached is not blocked?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hello Bob,

    Yes. If the .js file is not inside the compressed file (zip, tar, etc.). It not block.

    As the email was received from do-not-notify@fw-notify.net.  I'm sure this was caused by the UTM9.

  • 0 in reply to Jeremy Lo

    You mentioned an Exception - please show a picture of the Edit of that.  Also, a picture of the email that should have been blocked and the lines from the SMTP log where it was allowed to pass.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to Jeremy Lo

    You mentioned an Exception - please show a picture of the Edit of that.  Also, a picture of the email that should have been blocked and the lines from the SMTP log where it was allowed to pass.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML