Sven,

> I'm trying to have exe files banned in attachments,
> unless they are inside a zip file.
>
> Currently amavis seems to inspect the attachments
> themselves in addition to the contents of archives
> in order to decide if a mail should be banned or not.
>
> Any way to, say, "whitelist" zip files before banning exe files?

Yes, this is possible in recent versions. (previously the
syntax and intention was there, but the implementation
was encountering undesired interaction between banning
names/types/mime-types). Use 2.3.2-pre1 or 2.3.1 if
you need that functionality correctly implemented.

Just place a rule:
  [ qr'^\.zip$'=> 0 ],
_before_ a rule that is blocking executables.
Scanning from mail root to its leaves, the .zip rule
will be encountered first and rules for zip members
won't be tried.

> I'm currently using
>    banned_filename_maps      => [ new_RE( qr|.*\.exe$|i, ) ],
> inside policy bank.

That's fine, it enables one to provide different banning
rules for different groups of smtp clients, e.g. based on
their IP address or Postfix rules.

  Mark


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to