Scrips wouldn't help you because they get processed after ticket creation.
If I were in your position I'd probably try dealing with this at the mail
delivery level, e.g. by adding some sort of postprocessor that rewrites
incoming mail when it encounters attachments with certain MD5/SHA checksums.
My situation is this, I have users sending in support requests and they are
processing just fine. I am using fetchmail and mailgate, no problems,
tickets get created etc...
I want to strip attachments however, specifically those associated with
signatures internal to the company.
How can I best
