The original version of this page can be found at : http://forum.makemusic.com/default.aspx?f=6&m=489818
Posted By : [email protected] - 12/9/2016 6:29 PM
One of our writers is trying to e-mail .musx files to an engraver, and the malware filter on our e-mail server blocks the messages. The reason given is that the attachments contain .jar (Java archive) files, which are a potential means of spreading malware.

1. Do .musx files really contain .jar files?
2. If not, why does the malware filter think they do?
3. If so, is there a way to prevent them from doing so?

Posted By : N. Grossingink - 12/9/2016 6:44 PM
Try "zip"ing the file before sending.

N.


OSX El Capitan 10.11.6
Finale 2011c, 2012c for production work

Finale 2014.5, not used by my clients

(Finale v25 - not interested yet)

TgTools, Patterson Plugins, JW Change and Staff Polyphony, QuicKeys 4
Mac Mini 2.4 Ghz Intel, 8GB RAM
New Belgium Fat Tire Ale

"At last, fortissimo!"
–Gustav Mahler, on visiting Niagara Falls


Posted By : MikeHalloran - 12/9/2016 7:33 PM
So ... a Hal Leonard email server blocks Finale files.... No, that is the punch line.

Files generated by Finale 2014 could make calls to Java. Those generated by Finale 25 do not. Both will end in .musx.

Email automatically zips attachments. I don't know that zipping a file beforehand helps but it's worth a try.


Finale 25.1, 2014.5, 2011c, SmartScore X Pro II, Encore 5.07, GPO 5
2010 iMac i7, 32G RAM, 2T SSD, Late 2013 MacBook Air, OS 10.12.1
MOTU Digital Performer 9.12, 9.02, Logic Pro X 10.2.4


Posted By : BvdPress - 12/9/2016 8:30 PM
Try replacing ".musx" with ".doc" and then email with instructions for the person receiving the file to to then change ".doc" to ".musx" after it is received.

It is the only way for some military libraries to receive files or so I have been told when I send them files.

Of course this doesn't answer questions, but might be a work around.


Bryan Doughty
BVD Press, Music Express, BrassWorks4, Timber Ridge Music,
Kiwi Press, Serendipity Press and Cimarron Music Press
[email protected]
http://www.cimarronmusic.com/


Posted By : MikeHalloran - 12/10/2016 1:00 AM
I think there's a big difference between the military and the largest sheet music publisher in the world when it comes to blocking Finale files.

Just saying...


Finale 25.1, 2014.5, 2011c, SmartScore X Pro II, Encore 5.07, GPO 5
2010 iMac i7, 32G RAM, 2T SSD, Late 2013 MacBook Air, OS 10.12.1
MOTU Digital Performer 9.12, 9.02, Logic Pro X 10.2.4


Posted By : Dr. Wiggy - 12/10/2016 4:28 AM
[email protected] said...
1. Do .musx files really contain .jar files?
2. If not, why does the malware filter think they do?
3. If so, is there a way to prevent them from doing so?


1. Seems unlikely. MusicXML uses Java to operate, but I can't see why a .jar file would be inside a .musx file.
.musx files are a zipped collection of various files and folders. (So further zipping is unlikely to help.) You can make a copy, give it a .zip file ending, extract it, and inspect the contents to see if .jar files are inside.


2. It wouldn't be the first time that malware filters were either wrong or aggressively over-cautious.

3. Ask your IT Support team or the developer of the filter.


Finale v.25.1, 2012 MacMini; 2012 MacBook Pro (10.11.6 / 10.12.1)
Edirol FA-66; Roland A-49, HP Laserjet 5200 DTN
Ancient Groove Music www.ancientgroove.co.uk


Posted By : BvdPress - 12/10/2016 7:20 AM
MikeHalloran said...
I think there's a big difference between the military and the largest sheet music publisher in the world when it comes


Well sure and I would hope so, but it is the only way to get their music libraries needed files many times. Don't forget the military also includes the academies which fall under both .mil and .edu which many times is not exactly conducive to education.

Basically they do what they can to get the job done and I would assume so would we if we needed that file for a performance in few hours :)


Bryan Doughty
BVD Press, Music Express, BrassWorks4, Timber Ridge Music,
Kiwi Press, Serendipity Press and Cimarron Music Press
[email protected]
http://www.cimarronmusic.com/


Posted By : [email protected] - 12/12/2016 10:50 AM
Thanks to all for your help. The culprit is the "META-INF" subfolder of a MUSX file: JAR files contain a subfolder of that same name, so that evidently is what our malware filter uses to identify these as JAR files. (And no, zipping does nothing to help them escape scrutiny.)

Posted By : Mike Halloran - 12/12/2016 1:28 PM
[email protected] said...
Thanks to all for your help. The culprit is the "META-INF" subfolder of a MUSX file: JAR files contain a subfolder of that same name, so that evidently is what our malware filter uses to identify these as JAR files. (And no, zipping does nothing to help them escape scrutiny.)


I expected something like that. Some of the new filters are overly aggressive.

Many companies now prohibit the sending of credit card info in email. Unfortunately, the latest GMail filters look for words such as VISA, Amex, Discover etc. as are often contained in invoices and payment instructions.

More than one IT department is scratching their heads over this one.


Mike Halloran

Finale 25.1 & 2014.5, SmartScore X Pro II, Encore 5.0.7
2010 iMac 2.93G i7 Quad w/ OWC eSATA mod, 20G RAM, OS 10.12.1, 2T SSD
DP 9.1, 8.07, 7.24, Logic Pro X 10.2.4, DSP-Quattro, PSP, IK, NI, Eventide, Izotope & Antares plugins
G4 running OS 10.4.11 & 9.2 with legacy apps


Posted By : N. Grossingink - 12/12/2016 2:51 PM
Out of curiosity, which version of Finale saved these files? Was it v25.2?

N.


OSX El Capitan 10.11.6
Finale 2011c, 2012c for production work

Finale 2014.5, not used by my clients

(Finale v25 - not interested yet)

TgTools, Patterson Plugins, JW Change and Staff Polyphony, QuicKeys 4
Mac Mini 2.4 Ghz Intel, 8GB RAM
New Belgium Fat Tire Ale

"At last, fortissimo!"
–Gustav Mahler, on visiting Niagara Falls


Posted By : Dr. Wiggy - 12/12/2016 3:32 PM
N. Grossingink said...
Out of curiosity, which version of Finale saved these files? Was it v25.2?

The file format has been consistent since 2014.


Finale v.25.1, 2012 MacMini; 2012 MacBook Pro (10.11.6 / 10.12.1)
Edirol FA-66; Roland A-49, HP Laserjet 5200 DTN
Ancient Groove Music www.ancientgroove.co.uk


Posted By : Charles Lawrence - 12/13/2016 1:39 PM
So, what are you doing to transfer the files via email?  Renaming the extension prior to sending may not work, since the META-INF folder is still there.  You could defeat the filter blocking files containing a META-INF directory by unzipping the MUSX file, changing the META-INF to something entirely different, say FNI-ATEM, or anything else that doesn't contain META-INF, then re-zipping the file back into a MUSX, and emailing.  It is understood that the recipient will have to reverse the process on his side before attempting to read the MUSX into Finale.  You could mutually agree on a name for the META-INF directory.


"Anything is possible if you don't know what you are talking about!"

Windows 10 Professional (x64) (build 10586)
 
3.50 gigahertz Intel Core i7-5930K, Multi-core (6 total), Hyper-threaded (12 total)
32638 Megabytes Usable Installed Memory, 17514.37 Gigabytes Usable Hard Drive Capacity
NVIDIA GeForce GTX 980 - 4GB [Display adapter]
ASUS Rampage V Extreme motherboard, Realtek HD Audio

Finale 2014.5.6359, Finale 25.2.0.92
Garritan GPO4.02


Cakewalk SONAR X3 - (X3e build 244) - x64, Sound Forge Audio Studio 10.0, Audacity 2.1.0
Sharpeye 2.68, PhotoScore Ultimate 7.0.2, SmartScore X2 Pro 10.5.8

"There is a world of difference between a person who has a big problem and a person who makes a problem big." – John Maxwell


Posted By : [email protected] - 12/13/2016 2:18 PM
Now the files can be sent. I'm not sure what changed.

Posted By : Zuill - 12/13/2016 2:41 PM
The future is in cloud sharing. That would probably prevent these kind of issues.

Zuill


"When all is said and done, more is said than done."
 
Win 7 64bit, 2011b, 2012c, 2014d, 2014.5, 25.2
 
Favorite Forum quote: "Please, everybody, IGNORE THE TROLL!"


Posted By : Mike Halloran - 12/13/2016 4:26 PM
[email protected] said...
Now the files can be sent. I'm not sure what changed.

It could be that the host made some tweaks to accommodate customer complaints.


Mike Halloran

Finale 25.1 & 2014.5, SmartScore X Pro II, Encore 5.0.7
2010 iMac 2.93G i7 Quad w/ OWC eSATA mod, 20G RAM, OS 10.12.1, 2T SSD
DP 9.1, 8.07, 7.24, Logic Pro X 10.2.4, DSP-Quattro, PSP, IK, NI, Eventide, Izotope & Antares plugins
G4 running OS 10.4.11 & 9.2 with legacy apps