* JM <jmesenbr@???> [20040823 21:06]: wrote:
> Ok, here is what I have for file attachments in a system filter,
>
> if $header_Content-type matches
> "(multipart/mixed|application/octet-stream)" then
> if $message_body matches
> "filename=\".*\\..*\\.(exe|ad[ep]|ba[st]|chm|cmd)\"" or
> $message_body matches
> "filename=\".*\\..*\\.(cpl|crt|pif|hlp|hta|in[fs]isp)\"" or
> $message_body matches
> "filename=\".*\\..*\\.(jse?|lnk|md[be]|ms[cipt]|pcd)\"" or
> $message_body matches
> "filename=\".*\\..*\\.(pcd|reg|scr|shs|vb[se]|ws[fhc])\""
> then
> etc..... etc....
>
> I can't seem to get this to work with a double extension, like
> somefile.txt.exe,
> and would it be nice if it could find a triple as well.
s/system filter/exiscan/
Sorry, I am saying that integrating exiscan into Exim will take care
of this kind of filtering more elegantly than the system filter. Of
course you could use the system filter for other things!
cheers
- wash
+----------------------------------+-----------------------------------------+
Odhiambo Washington . WANANCHI ONLINE LTD (Nairobi, KE) |
<wash at wananchi dot com> . 1ere Etage, Loita Hse, Loita St., |
GSM: (+254) 722 743 223 . # 10286, 00100 NAIROBI |
GSM: (+254) 733 744 121 . (+254) 020 313 985 - 9 |
+---------------------------------+------------------------------------------+
"Oh My God! They killed init! You Bastards!"
--from a /. post
