MacroMilter icon indicating copy to clipboard operation
MacroMilter copied to clipboard

This python based milter (mail-filter) checks an incoming mail for suspicious VBA macro code in MS 20xx Office attachments (doc, xls, ppt ...).

Results 17 MacroMilter issues
Sort by recently updated
recently updated
newest added

I have an issue on a new installed fedora 34 server. Using macromilter as I used to do on CentOS 8 machines I always get the following error in /var/log/maillog:...

Hello Thanks for this great code. I had issues decoding attachments. Adding the 2 lines shown below fixed the errors in Debian 10. (Python 2.7.16) reload(sys) sys.setdefaultencoding('UTF-8') Best

When REJECT_MESSAGE is false the code returns on finding the first suspicious attachment causing all remaining attachments (which could be malicious) delivered to the recipient. See PR #62 P.S. This...

Hi, Trying to run macrofilter with python 3 because pymilter is not available for python 2 in my distro. Made a few changes to macrofilter.py such as: import Milter try:...

bug
enhancement

Good afternoon, First of all thank you to the project, it's been very useful for our structure, great work. I would like to ask for help with a slightly unusual...

bug

When looking to https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3, I feel we should start to test MacroMilter using Python 3 in the future. Python 3.4 is also available via EPEL 7, including PyMilter. This does...

in backlog

Wouldn´t it be nice to have the Filename together with the Macrohash in the logfile instead of the hash only ? Before: INFO: [4] The macro hash is: 3fa93227b810d3359f258442 After:...

enhancement

is it possible that macro hash matching is done with a "string contains" instead of an exact hash value match ?

bug
in review

Wouldn´t it be better to have a log level of 2 or 3 as a default value in config.ini

enhancement

Wouldn´t it be convenient for senders to have an option to log the filename of a rejected file in the reject message ? Example: "ERROR - Attachment contains unallowed office...

enhancement