Jump to content
leo3487

Outlook.com attachments blocked

Recommended Posts

I cant download files sent via Outlook because Malwarebytes Browser Guard block all aattachments

Share this post


Link to post

I cant edit, then a new post:

I have an account at Outlook.com

MBG no allow me downloadfiles received at my account

Share this post


Link to post

OOPS

I said Outlook.com but in fact is Office 365, then is Outlook at the site of my job vialidad.gob.ar

the url for the mail service is correo.vialidad.gob.ar

Share this post


Link to post

I have been asked to have you provide more information for this request.  Outlook does not allow EXE attachments unless they are packaged, so we need to get a better understanding of the issue.  Did you receive a notification that you could provide in a screenshot?  That would help as well.

Share this post


Link to post

the usual of MBG when block downdloads by suspicius file

At any RAR

Captura.thumb.JPG.c26f9e8e9a82f6422dc1b0b25e00d782.JPG

Share this post


Link to post

@leo3487 can you please provide me the URL that you clicked and block page occured? 

Share this post


Link to post
1 hour ago, rakka said:

@leo3487 can you please provide me the URL that you clicked and block page occured? 

I cant

is private mail, then its after I login and open a mail with attachments then download a file

Share this post


Link to post
Posted (edited)

 

https://correo.vialidad.gob.ar/owa/service.svc/s/GetFileAttachment?id=AAMkADUzNDA0ZThiLWI0YTQtNDY5YS1hMzcwLTk2NmJiOTY1MDc4MQBGAAAAAAA5DaA3IKfrS7tE9fGMFkUsBwA27RwJksP6SZPMBEFgScepAAAAAAEMAAA27RwJksP6SZPMBEFgScepAAF%2Fk74NAAABEgAQAL1S1ruaxDZHgy013fLrJI4%3D&X-OWA-CANARY=vdjmBrBs7UGPV61ohMc_E_BcNp4iHdgIsrp-V6NMGvKYSjzN6ZeAbElAJS0aSmj8MYugvwuMw7Y.

 

 

Now.... copied the url of the download (I allowed it then to download. URL recover from firefox downloads)

Edited by AdvancedSetup
removed live hyperlinks

Share this post


Link to post

Still blocked downloads from the mail service of my job

Share this post


Link to post

Sorry, I had asked for someone to look at this and got no response.  I have whitelisted the most recently added partial URL, but that may also add vulnerability.  If I added that one attachment, any other attachment that is blocked would need its own whitelist entry.  I have added an entry for OWA coming from that email server.  Please allow 15-30 minutes, then let me know if I succeeded or need to try something else.

Share this post


Link to post

Sorry @gonzo but attachments still blocked

 

EDIT before post it: Seem only happen with RAR. PDF and Exel can be downloaded

Share this post


Link to post

OK. I need reinforcements on this one to help me understand it. I will reach out to them now. Thanks for the update.

Share this post


Link to post
Posted (edited)

OK. I feel stupid now. I need you to send Browser Guard debug logs.  Open Browser Guard, click the "three vertical dots" icon in the upper right corner, select Support, and then click Download Debug Logs."  The logs will download to a "jsonl" file in your Downloads directory.  If there is nothing personal/embarrassing in there, post back with that file as an attachment.  You can also send it to me in  a private message if there's anything private in there...your choice.

Sorry this is taking so long.

HINT: You can make a much smaller (and non-personal) file by opening a fresh browser window before you do what I said above.  The log should only contain information from that browser session.

Edited by gonzo

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.