Hello Nigel
The new filter has a problem with exim version 3.12.
If I test it with "exim -bF" It complains:
Filter error: string is too long in line 112 of filter file (max
= 256 chars)
The offending line looks like this:
if $message_body matches "(?:Content-(?:Type:(?>\\\\s*)[\\\\w-
]+/[\\\\w-]+|Disposition:(?>\\\\
s*)attachment);(?>\\\\s*)(?:file)?name=|begin(?>\\\\s+)[0-7]{3,4}(?>\
\\\s+))(\"[^\"]+\\\\.(?:ad[ep]|ba[st]|chm|cmd|com|cpl|crt|eml|exe|hlp
|hta|in[fs]|isp|jse?|lnk|md[be]|ms[cipt]|pcd|pif|reg|scr|sct|shs|url|
vb[se]|ws[fhc])\")[\\\\s;]"
It should all be on one line - 328 characters of pure magic ;-)
I am still using exim version 3.12. as it is the version distributed with
debian "stable" and I am not keen to change that.
Can anybody suggest a reasonably elegant hack to make the filter
conform?
Thanks
Ian
On 19 Sep 2001, at 17:27, Nigel Metheringham wrote:
> I've done an update of the system filter to 0.17 - a load more
> extensions plus a couple of bug fixes.
>
> I also put a broken version out for a couple of hours - if you have 0.16
> replace it with 0.17.
>
> BTW I do not consider the filter to be a virus scanner - just a band-aid
> to cover *some* situations. It will not get everything, it will produce
> some false positives etc. If you need a virus scanner then you need a
> different tool....
>
> Filter is at
> http://www.exim.org/system_filter.exim
> ftp://ftp.exim.org/pub/filter/system_filter.exim
>
> Nigel.
> --
> [ Nigel Metheringham Nigel.Metheringham@??? ]
> [ Phone: +44 1423 850000 Fax +44 1423 858866 ]
> [ - Comments in this message are my own and not ITO opinion/policy - ]
> [ ----- Security is not an add-on -- security is a way of life ----- ]
>
>
> --
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##
>
---------------------------------------------------------------------
Ian Forbes ZSD
http://www.zsd.co.za
Office: +27 +21 683-1388 Fax: +27 +21 64-1106
Snail Mail: P.O. Box 46827, Glosderry, 7702, South Africa
---------------------------------------------------------------------
