What about the idea I posted a long time ago...along the line
of RBL, ORBS...using DNS itself.
So, suppose you receive a message, pass it to a scanning server
and return the 'virus' signatures in term of DNS records. If
there're future success record lookups, deny further connections
or keep on receiving but can the message.
Some distributed mean would have to be arranged to allow the
central DNS servers to be updated with virus signatures encoded
in host name strings.
Chan
-----Original Message-----
From: Nigel Metheringham [
mailto:Nigel.Metheringham@VData.co.uk]
Sent: Tuesday, July 11, 2000 4:41 PM
To: I.S. Manager
Cc: exim-users@???
Subject: Re: [Exim] Exim content-filtering project
ismgr@??? said:
> Does "during the read-in phase" mean before the mail has been accepted
> from the sending host? Do you mean an arbitrary program could check
> for "friend@???", and given subjects, and *then* decide to give
> the sender a 550?
Potentially.
However you would have to read the message before you could make a
decision (this is a content handling hook), so your error response
would occur at the end of DATA. Some MTAs do not handle negative
responses at this point correctly. Maybe it would be possible to hook
the existing code that rejects this stuff on subsequent sends correctly.
Nigel.
--
[ - Opinions expressed are personal and may not be shared by VData - ]
[ Nigel Metheringham Nigel.Metheringham@??? ]
[ Phone: +44 1423 850000 Fax +44 1423 858866 ]
--
## List details at
http://www.exim.org/mailman/listinfo/exim-users Exim
details at
http://www.exim.org/ ##
