Re: [Exim] Yet Another Filter to block SoBig.F

Pàgina inicial
Delete this message
Reply to this message
Autor: Avleen Vig
Data:  
A: Kevin Reed
CC: 'Avleen Vig', exim-users
Assumpte: Re: [Exim] Yet Another Filter to block SoBig.F
On Tue, Aug 26, 2003 at 01:44:36AM -0700, Kevin Reed wrote:
> Wouldn't it just be easier to do...
>   discard log_message = "DISCARD: Message contained ($found_extension)."
>           demime = scr:pif


Possibly, but then, my filter works with both Exim3 and Exim4. Your ACL
only works with 4 :-)

> Of course the log_message doesn't actually log that.. (I'm still trying to
> figure out how to do that),
> But basically ANY mail with a *.pif or *.scr is simply dropped on the floor.
> I can't think of any legit reason for allowing those.
> This matches anyfilename.pif and anyfilename.scr
> No filter necessary.