Re: AW: [Exim] Bombarded by pif attachments

Top Page
Delete this message
Reply to this message
Author: Sheldon Hearn
Date:  
To: Graham Dodd
CC: exim-users
Subject: Re: AW: [Exim] Bombarded by pif attachments
On (2003/09/04 17:13), Graham Dodd wrote:

> as a newbie who's still working his way through Philip's book please excuse
> my ignorance of Exim, I hope to have it recified before long ;-)
>
> I would like to add a log message (exim_main.log) whenever an unwanted file
> extension is caught and I'm not sure whether to use message or log_message
>
> deny message   = This message contains an unwanted file extension \
>                   ($found_extension)
> demime         = pif:exe:com:scr:vbs
> message        = Bad extension caught: $found_extension from $sender_address


This ACL

  deny    message = This message contains an unwanted file extension ($found_extension)
    demime = ade:adp:bas:bat:chm:cmd:com:cpl:crt:exe:hlp:hta:\
         inf:ins:isp:js:jse:lnk:mdb:mde:msc:msi:msp:mst:\
         pcd:pif:reg:scr:sct:shs:shb:url:vb:vbe:vbs:wsc:\
         wsf:wsh


gives this in the logs (pretty-printed for email):

2003-09-03 19:00:03 19ugbU-000HWT-Ld H=adsl-17-219-175.mia.bellsouth.net
(TERESA) [68.17.219.175] F=<InfoService@???>
rejected after DATA:
This message contains an unwanted file extension (pif)

The message is sent to the SMTP client, but also logged.

Ciao,
Sheldon.