FW: [Exim] Problems with sobig ACL :-(

Sorry forgot to cc User list.


Ed

-----Original Message-----
From: Exim St-pierre.com
Sent: 21 August 2003 15:47
To: 'Avleen Vig'
Subject: RE: [Exim] Problems with sobig ACL :-(


OK here is the ACL that I implemeted and it is working well:

acl_check_data:
 deny  message = "This message is appears to contain the W32/Sobig-F virus"
    condition   = ${if or {{eq{${lc:$header_subject:}}{re: that movie}}\
                {eq{${lc:$header_subject:}}{re: wicked screensaver}}\
                {eq{${lc:$header_subject:}}{re: your application}}\
                {eq{${lc:$header_subject:}}{re: approved}}\
                {eq{${lc:$header_subject:}}{re: re: my details}}\
                {eq{${lc:$header_subject:}}{re: details}}\
                {eq{${lc:$header_subject:}}{your details}}\
                {eq{${lc:$header_subject:}}{thank you!}}}{yes}{no}}

accept

You have to make sure that you have defined acl_smtp_data earlier in your
config. so I have:

acl_smtp_data = acl_check_data

Regards

Ed St Pierre

-----Original Message-----
From: Avleen Vig [mailto:lists-exim@silverwraith.com]
Sent: 21 August 2003 15:19
To: exim-users@???
Subject: [Exim] Problems with sobig ACL :-(


Can anyone help?
This Exim4 ACL doesn't seem to be working - everything gets rejected.
I'm sure I'm doing something obviously wrong, but I haven't written
ACL's before..

check_sobig:
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Re: My Details}
{yes}{no}}
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Re: Details} {yes}{no}}
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Your Details} {yes}{no}}
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Re: That movie}
{yes}{no}}
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Re: Wicked screensaver}
{yes}{no}}
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Re: Details} {yes}{no}}
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Re: Thank you!}
{yes}{no}}
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Thank you!} {yes}{no}}
  deny    message       = Virus infected message
  condition             = ${if match {$h_subject:}{Re: Approved} {yes}{no}}
  accept

--
Avleen Vig
Systems Administrator
Personal: www.silverwraith.com
EFnet:    irc.mindspring.com (Earthlink user access only)

--

## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
details at http://www.exim.org/ ##



This email has been scanned for viruses by NetBenefit using Sophos
anti-virus technology