...
> The above filter wont catch much attachments, drop something
why not ?
> like this into $COURIER_HOME/etc/maildroprc:
>
> VERBOSE=9
> echo "X-Content-Scan: $HOSTNAME"
> xfilter "reformail -A'X-Content-Scan: $HOSTNAME'"
>
> if ( /^content-type: !multipart.*![:space:]/h )
> {
> echo "X-Content-Filter: $MATCH2"
> xfilter "reformail -A'X-Content-Filter: $MATCH2'"
>
> if (
> /[:space:](file)?name=\"!.*\.((vbs)|(scr)|(exe)|(com)|(pif)|(lnk)|(bat))!\"$/:b
> )
> {
> FILENAME=$MATCH2
> echo "X-Content-Warning: $FILENAME"
> xfilter "reformail -A'X-Content-Warning: $FILENAME'"
>
> /^subject: !.*/
> xfilter "reformail -I'Subject: [VIRUS WARNING: $FILENAME] $MATCH2'"
> }
> }
Thanks for the filter, but I don't see why it would catch more viral
attachements... ? It makes more checks and is definately more consistent,
but...
> X-Content-Scan: sandbox.dmz
> X-Content-Filter: multipart/mixed;
> X-Content-Warning: RunMe.bat
What's the use of those additionnal X-flags. The users all use outlook and
outlook express, have no idea about SMTP or properly using/configuring their
mail clients, so I guess it has no use for them... right ?
...
> > /etc/courier/enablefiltering:
> > esmtp
> You are mixing up completely different ways of filtering.
hm ? why is that ?
/etc/courier/enablefiltering enables the /etc/courier/filters/ stuff, right ?
OK, than I can remove the line and disable it ;-)
(this whole filtering stuff is a little confusing... some more documentation
or rather an overview of how the courier and maildrop filtering works, what's
better done with one or the other, etc... would be nice ;))
--
-o) Pascal Bleser ATOS Origin/Aachen(DE) |
/\\ <[EMAIL PROTECTED]> |
_\_v <[EMAIL PROTECTED]> |
---------------------------------------------|
Jesus saves,Buddha makes incremental backups :
---------------------------------------------'
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
