Re: [Exim] Bombarded by pif attachments

Top Page
Delete this message
Reply to this message
Author: Jez Hancock
Date:  
To: 'exim-users@exim.org'
Subject: Re: [Exim] Bombarded by pif attachments
On Wed, Sep 03, 2003 at 03:47:22PM -0500, Segree, Gareth wrote:
> I have been bombarded with pif attachments over the past week.
> How can I do the following
> 1) tell exim not to launch spam assassin for mails > than a certail size

Add a condition:
    condition = ${if <{$message_size}{80k}{1}{0}}
before the part that launches SA.


> 2) delete mails with pif/exe/com/scr/vbs attachments

Add this to your acl_smtp_data acl to deny messages with those
attachments:

deny    message   = This message contains an unwanted file extension \
                  ($found_extension)
  demime          = pif:exe:com:scr:vbs


You might want to add 'bat:lnk' to the end of the list as well - someone
posted a comprehensive list on here a few weeks ago.

--
Jez

http://www.munk.nu/