I'm looking for a magical way to do do something where a UserAttach rule
could work for a pair, like
to:OurOneUser@OurCharity.org_from:*@TheShippingCo.com=>block=> (the list)
Here's the scenario:
A giant international shipping company that we work with needs to be able
to send us excel files with macros in them. They will not provide the
files any other way and they are critical to our charity. A seemingly ever
changing list of people at this external domain send these files, but only
to ONE of our people here. They regularly violate SPF, don't consistently
DKIM sign - and they're so incredibly large that there is no hope of change
on their end.
I am trying to avoid doing the exception for the whole sender domain
because it's a domain that's commonly used to send spam/scam emails too.
So, an exception like:
*@ABC.com => block =>
exe\-bin|:MSOM|:MSOLE|url|ade|adp|asx|bas|bat|dot|dotx|xlt|xlts|bin|chm|cmd|com|cpl|crt|dbx|dll|exe|hlp|hta|htb|inf|ifs|isp|js|jse|lnk|mda|mdb|mde|mdz|mht|msc|msi|msp|mst|nch|pcd|pif|prf|ps1|reg|scf|scr|sct|shb|shs|vb|vbe|vbs|vba|wms|wsc|wsh|rar|dotm
(which has the :MSOM exception and doesn't have xlsm listed like our
regular block does)
would work, but then lets the scammers send scam Excel macro files to
everyone. No good.
With my idea of having user attach be matched only for one recipient only
if it's from the shipper domain, we limit the exposure a bit.
Thoughts? Other ideas?
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
