Messaging Gateway

Hello,

I am not sure why these file types are being stopped/blocked... Can someone help me please?

the policy is a simple one

If the file metadata is in the attachment list (which I've created)  the attachement list looks like this below

I do have the entry for OCX so I am assuming it is matching DOCX  but i would of thought that it would allow DOCX but stop OCX files!!!

True file type is AC3 Audio File Format(.ac3)
	True file type is Amiga IFF (8SVX) Sound
	True file type is Amiga MOD
	True file type is Audio Interchange File Format (AIFF)
	True file type is AutoDesk Animator FLIC
	True file type is AutoDesk Animator Pro FLIC
	True file type is Creative Voice (VOC)
	True file type is ELF Executable
	True file type is Lotus ScreenCam
	True file type is Macromedia Director
	True file type is Microsoft Wave
	True file type is MIDI
	True file type is MPEG Audio
	True file type is MPEG Movie
	True file type is MS-DOS Batch File
	True file type is MSDOS Device Driver
	True file type is MSDOS/Windows Program
	True file type is NeXT/Sun Audio Data
	True file type is PC (.COM)
	True file type is QuickTime Movie
	True file type is Real Audio
	True file type is RealMedia Streaming Media (.rm, .ra)
	True file type is RIFF MIDI
	True file type is RIFF Multimedia Movie
	True file type is Unix Executable (3B20)
	True file type is Unix Executable (Basic-16)
	True file type is Unix Executable (Bell 5.0)
	True file type is Unix Executable (iAPX 286)
	True file type is Unix Executable (MC680x0)
	True file type is Unix Executable (PDP-11/pre-System V VAX)
	True file type is Unix Executable (VAX)
	True file type is Unix Executable (WE32000)
	True file type is Unix Executable (x86)
	True file type is Video for Windows (AVI)
	True file type is Windows Media Audio Format (WMA)
	True file type is Windows Media Video Format (WMV)
	MIME-type is exe
	Extension is 386
	Extension is aac
	Extension is ac3
	Extension is acm
	Extension is afx
	Extension is aif
	Extension is aifc
	Extension is aiff
	Extension is asf
	Extension is asp
	Extension is asr
	Extension is asx
	Extension is avb
	Extension is avi
	Extension is bat
	Extension is bin
	Extension is cap
	Extension is cda
	Extension is cgi
	Extension is chm
	Extension is cla
	Extension is class
	Extension is cmd
	Extension is com
	Extension is csb
	Extension is csc
	Extension is divx
	Extension is dll
	Extension is drv
	Extension is dv
	Extension is dvi
	Extension is exe
	Extension is flv
	Extension is htt
	Extension is inf
	Extension is ini
	Extension is ivf
	Extension is js
	Extension begins with js
	Extension is jse
	Extension is m1v
	Extension is m2p
	Extension is m2v
	Extension is m3u
	Extension is m4a
	Extension is m4p
	Extension contains mid
	Extension is moov
	Extension is mov
	Extension is mp1
	Extension is mp2
	Extension is mp3
	Extension is mp4
	Extension is mpa
	Extension is mpd
	Extension is mpe
	Extension is mpeg
	Extension is mpg
	Extension is mpv
	Extension is mpv2
	Extension is ocx
	Extension is ogg
	Extension is ogm
	Extension is omf
	Extension is php
	Extension is pkm
	Extension is pls
	Extension is qt
	Extension is ra
	Extension is ram
	Extension is rbs
	Extension is reg
	Extension is rm
	Extension is scr
	Extension is sh
	Extension is shs
	Extension is swf
	Extension is sys
	Extension is vbe
	Extension is vbs
	Extension is viv
	Extension is vivo
	Extension is vo
	Extension is vob
	Extension is vxd
	Extension is wav
	Extension is wax
	Extension is wbt
	Extension is wiz
	Extension begins with wm
	Extension is wmv
	Extension is wsh
	Extension is wvx

I've experienced that if .bin is blocked, it will block docx. I think inside .docx there is an attachment with extension .bin

So, try removing .bin from the attachment list and see if it works.

Yep, LEOL is correct, they are containers with .bin files inside.

What version of Brightmail Gateway are you running?

Also, there are old threads with the same question/info, the search bar is up in the top right :-)

https://www-secure.symantec.com/connect/fr/forums/how-keep-quarantining-docx-files

HTH

//ian

The bin/hex True Type file will also cause this problem.  I ran into this one.

hi all thank you for your help.  I've removed bin.. but still getting blocked..on

docx
dotx
xlsx

could it be that still have mime-type EXE?

hi again..

turned off MINE-Type EXE  and it stopped a ZIP file that had docx files inside.. so that isn't it.

also finding emails with a WINMAIL.DAT are being blocked too!!!

Our trial of this product is almost over (in both the sense of time and it's so far poor performance in several areas, this being one of them) so any help appreciated

Refer the Admin guide , may be you have specify in string for Ex: if you want to block .OCX files you have to put /OCX/ then see