David,
I can't just reject the email with a .exe because my users do occasionaly send/receive .exe's and need to know about it.
I looked at the example MD config, and the only difference between it and my current config is in the filter subroutine. The example drops the part, whereas I call the quarantine function.
Because I call the quarantine function, if a user really did need that exe - I can get it for them.
So if I revert back to the example and only call the drop_with_warning function, the attachment will be dropped, and if the email is also spam - that will be detacted down the line in filter_end, right?
I can live with that. Though I know one day one of my users will have someone send them an exe (i.e Dell Support emails them an exe that determines service tag or something), and they will want that exe right away.
-John
On Nov 27, 2004, at 10:35 PM, David F. Skoll wrote:
On Sat, 27 Nov 2004, John Von Essen wrote:
I have noticed that when an email contains a violating file attachment,
spam filtering does not occur.
That's not the case for the sample filter distributed with MIMEDefang.
In my environment, I sort of have to have the below functionality. I block .exe files, and I need to communicate that blockage to my users.
Why?
Why not simply reject .exes?
Is there anyway to modify the action_quarantine() and
action_drop_with_warning() functions such that they are not exempt from
spam filtering on the text body of the email?
Those functions have no effect on spam filtering.
Regards,
David. _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
John Von Essen ([EMAIL PROTECTED]) President, Essenz Consulting (www.essenz.com) Phone: (800) 248-1736 Fax: (800) 852-3387
_______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
