Re: [Exim] The New System Filter giving me a bit of problem

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Chris Bayliss
Datum:  
To: Odhiambo Washington
CC: exim-users
Betreff: Re: [Exim] The New System Filter giving me a bit of problem
> Content-Type: text/plain; charset=us-ascii
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
> I am still wondering why the new system filter rejected a message with the
> message below while I _don't_ have .vcf as part of the file extensions.
>
> A .vcf is a genuine part of Netscape's signature file.


Its not vcfs that are the problem as a type.

> > A message that you sent could not be delivered to one or more of its
> > recipients. This is a permanent error. The following address(es) failed:
> >
> >   ngige@???
> >     This message has been rejected because it has
> >     a potentially executable attachment "gachui.vcf"  begin:vcard
> >n:Gachui;James  tel;cell:254 72 527937 tel;fax:254 2 334435 tel;home:25425=
> 12558 tel;work:254 2 317076 x-mozilla-html:FALSE
> >url:http://www.wananchi.com
> >org:Wananchi Online Ltd version:2.1 email;internet:gachui@???
> >     This form of attachment has been used by
> >     recent viruses or other malware.
> >     If you meant to send this file then please
> >     package it up as a zip file and resend it.

>


What has happened is the match for unquoted filenames is too general
- the dot . which replaced the \w has matched any characters until it
finds a .com, because lines are folded and .com is an executable
type. Note that the .com is part of the email address in the vcard -
vcards from people with addresses in other domains seem to pass the
filter ok. This also explains why the vcard is included in the error
message.

We set ours to \S which may not be perfect but is better. If we could
figure out how to limit the match once the first double space is hit
the match would not go beyond the header and the scope of the match
could be widened again.

Chris Bayliss
The University of Birmingham

> I had to move the filter out of the way and revert to the old one as a
> temporary measure.
>
> Thank you.
>
> -Wash
>
> --
> Odhiambo Washington
> Wananchi Online Ltd.,
> wash@??? 1st Flr Loita Hse.
> Tel: 254 2 313985 Loita Street.,
> Fax: 254 2 313922 PO Box 10286,00100-NAIROBI,KE.
>
> Every artist dips his brush in his own soul, and paints his own nature into=
> =20
> his pictures.=20
> -Henry Ward Beecher=20
> (contributed by Chris Johnston)=20
>
> --+HP7ph2BbKc20aGI
> Content-Type: application/pgp-signature
> Content-Disposition: inline
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (FreeBSD)
> Comment: For info see http://www.gnupg.org
>
> iD8DBQE7fNnRn7LIsuxjem8RAg+rAKCx5Ni2gIxiNrWS2v7sreTN92IPdACfQIsr
> GuY3u3B5p9FMU5x9XQ9ajp0=
> =5PR/
> -----END PGP SIGNATURE-----
>
> --+HP7ph2BbKc20aGI--
>
> --
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##
>