Using this example is working great when it comes to "discarding"
# If the message contains SCR or PIF we want to Log this
warn log_message = DISCARD: ATTACHMENT ($found_extension)
demime = scr:pif:exe:com
# and then discard it
discard demime = scr:pif:exe:com
mainlog show that it is discarded,
2003-09-20 14:23:08 HLJ7EH-0005L4-MU H=sea1-f108.sea1.hotmail.com
(hotmail.com) [207.68.163.108] Warning: DISCARD: ATTACHMENT (exe)
2003-09-20 14:23:08 HLJ7EH-0005L4-MU <= testing1@???
H=sea1-f108.sea1.hotmail.com (hotmail.com) [207.68.163.108] P=esmtp
S=97997 id=Sea1-F108r7E0P6OUCd000240b4@???
2003-09-20 14:23:08 HLJ7EH-0005L4-MU => blackhole (DATA ACL discarded
recipients)
2003-09-20 14:23:08 HLJ7EH-0005L4-MU Completed
but why do I get this in the reject log (this is the same message id)?
2003-09-20 14:23:08 HLJ7EH-0005L4-MU H=sea1-f108.sea1.hotmail.com
(hotmail.com) [207.68.163.108] Warning: DISCARD: ATTACHMENT (exe)
Envelope-from: <testing1@???>
Envelope-to: <testing@???>
P Received: from sea1-f108.sea1.hotmail.com ([207.68.163.108] helo=hotmail.com)
by mail.captainnet.net with esmtp (Exim 4.22)
id HLJ7EH-0005L4-MU
for testing@???; Sat, 20 Sep 2003 14:23:05 -0700
P Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Sat, 20 Sep 2003 14:22:34 -0700
P Received: from 66.218.32.47 by sea1fd.sea1.hotmail.msn.com with HTTP;
Sat, 20 Sep 2003 21:22:34 GMT
X-Originating-IP: [66.218.32.47]
X-Originating-Email: [testing1@???]
F From: "testing1 testing1" <testing1@???>
T To: testing@???
B Bcc:
Subject: 1
Date: Sat, 20 Sep 2003 14:22:34 -0700
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_38a5_7589_756e"
I Message-ID: <Sea1-F108r7E0P6OUCd000240b4@???>
X-OriginalArrivalTime: 20 Sep 2003 21:22:34.0936 (UTC)
FILETIME=[4F1D1B80:01C37FBD]
