On Tue, Sep 30, 2003 at 04:00:46PM +0100, jzaw wrote:
> On Tuesday, Sep 30, 2003, at 13:37 Europe/London, Pavel Gulchouck wrote:
>> Due to Win32.HLLM.Gibe.2 virus here's too much load,
> <snip>
>> so I need drop a big part of this mail as victum.
>> I decide to deny all message with size more then 50K and messages
>> without SIZE specified in MAIL command. In this case I deny all
>> viruses
> i see that HLLM.Gibe.2 (also kown as Swen?) has its own smtp engine
>
> is there any reason why you cant just reject any and all exe
> attachments? (and many others)
> at smtp time using exim compiled with exiscan-acl patch?
[...]
That'd be a lot more expensive. Pavel is rejecting after MAIL FROM:
(or RCPT TO:) before he has had to receive the big fat useless mail.
cu andreas
