RE: [Exim] filtering on email attachments

Pàgina inicial
Delete this message
Reply to this message
Autor: Marsh, Ian
Data:  
A: 'exim-users@exim.org'
Assumpte: RE: [Exim] filtering on email attachments
I've taken a look at this and it looks kind of interesting but it appears to
need to run as the 'local delivery agent'. As the server on which the
quarantine system must run is just a mail gateway (no local users) it's not
something that can be used 'as is'. However, the guts of the macro detection
code appearr to be written in perl so I might be able to hash something
together from that!

Thanks,
Ian

-----Original Message-----
From: S. Joel Bernstein [mailto:joel@xexec.com]
Sent: 30 May 2001 13:02
To: Exim Users Mailing List
Subject: Re: [Exim] filtering on email attachments


ftp://ftp.rubyriver.com/pub/jhardin/antispam/procmail-security.html

I wonder if that will be of some help? It appears to be a (fairly complete)
framework for some fairly heavy munging of attachments....

I have not used it and cannot vouch for it's effectiveness :op

Joel
----- Original Message -----
From: "Marsh, Ian" <ian.marsh@???>
To: <exim-users@???>
Sent: Wednesday, May 30, 2001 11:58 AM
Subject: [Exim] filtering on email attachments


> I realise that this is somewhat 'off topic' for this list but please

help
> as I'm running out of ideas fast!
>
> I have been working on a method to quarantine emails that contain

certain
> attachments (word and excel documents specifically) and have been able to

do
> so using the 'generic attachment system filter' that I found in the list
> archives. Whilst I accept that this is not really the job of an MTA, I

have
> not been able to find an alternative application that does what we need

(ie:
> letting the end user accept the responsibility for the document rather

than
> an admin user).
>
> Unfortunately the powers that be only want documents that contain macros
> to be quarantined rather than every document and I have no idea how to do
> this! I realise that the attachments will need to be decoded and then

passed
> to <some program> to check for the presence of macros, so far I have been
> unable to locate such a program.... If it can be done within Perl then

that
> will be fine as I can then do the entire filter in perl.
>
> Can anyone help or point me in the right direction?
>
> Thanks in advance,
> Ian
>
> --
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim

details at http://www.exim.org/ ##


--
## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
details at http://www.exim.org/ ##