bper put forth on 9/21/2010 2:26 PM:
> Point taken. I have, and still am, investigating AV scanning. What are your
> thoughts on the best solution/fit with postfix?
Someone else will need to answer. I don't do A/V scanning in Postfix.
I simply reject any emails, using mime_header_checks, that contain
attachment types likely to contain viral payload. I can get away with
this as my user base is very small and well educated. This method
probably does not scale for most other environments.
/etc/postfix/mime_header_checks
# Reject email containing unwanted attachments
/name=\"(.*)\.(386|bat|chm|cpl|cmd|com|do|exe|hta|jse|lnk|msi|ole)\"$/
REJECT Unwanted attachment $1.$2
/name=\"(.*)\.(pif|reg|rm|scr|shb|shm|shs|sys|vbe|vbs|vxd|xl|xsl)\"$/
REJECT Unwanted attachment $1.$2
This is by no means a complete list, as there are probably some I should
have but am missing.
--
Stan
