> Anders Norrbring wrote: > > I've noticed the last 2 days that my Amavis goes into a complete halt > when > > running into 'ecard.zip' > > Is there any way to have e-mails with that file name to be deleted > > immediately, without having to unpack and scan them? > > > > Here's pull from the log of the latest posts before it got stuck: > > > > Jun 1 15:36:55 siri.the-server.net /usr/sbin/amavisd[25663]: (25663- > 20) > > LMTP:[127.0.0.1]:10024 /var/spool/amavis/tmp/amavis-20090601T152822- > 25663: > > <[email protected]> -> <[email protected]> SIZE=39249 > Received: > > from mail.the-server.net ([127.0.0.1]) by amavis.the-server.net > > (siri.the-server.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP > for > > <[email protected]>; Mon, 1 Jun 2009 15:36:55 +0200 (CEST) > > Jun 1 15:36:55 siri.the-server.net /usr/sbin/amavisd[25663]: (25663- > 20) > > Checking: Xq+AKoH3Yql9 [66.65.60.137] <[email protected]> -> > > <[email protected]> > > Jun 1 15:36:55 siri.the-server.net /usr/sbin/amavisd[25663]: (25663- > 20) > > p003 1 Content-Type: multipart/mixed > > Jun 1 15:36:55 siri.the-server.net /usr/sbin/amavisd[25663]: (25663- > 20) > > p001 1/1 Content-Type: text/plain, size: 461 B, name: > > Jun 1 15:36:55 siri.the-server.net /usr/sbin/amavisd[25663]: (25663- > 20) > > p002 1/2 Content-Type: application/zip, size: 27154 B, name: > ecard.zip > > > > Grateful for any ideas on this.. > > Anders. > > You can reject the mail with postfix's mime_header_checks > feature. Something like this (obviously untested): > > # main.cf > mime_header_checks = pcre:/etc/postfix/mime_header_checks > > # /etc/postfix/mime_header_checks > /^Content- > (Disposition|Type):\s+.*?(file)?name="?ecard\.zip(\?=)?"?\s*(;|$)/ > REJECT bad attachment name > > You might need to tweak the above expression to match what's > actually in the file, but this should be a good starting point. > > > -- Noel Jones
Thanks Noel, If I still have these problems tomorrow, I'll try your suggestion. It seems like the "wave" is over for now.. As far as I've guessed from logs, the zip file contains 'ecard.exe'. I hate to admit it, but regex's are a dark hole for me.. ;-) Anders. ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp as they present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
