Gururajan Ramachandran wrote:
> I put the following in the DATA ACL:
>
> deny message = Hiding of file extensions is
> not allowed
> log_message = Dangerous extension (CLSID
> hidden)
> regex =
> ^(?i)Content-Disposition::(.*?)filename=\\s*"+((\{[a-hA-H0
> -9-]{25,}\})|((.*?)\\s{10,}(.*?)))"+\$
>
> However, CLSID attachments still make it through. What
> else do I need to block CLSID attachments?
The DATA ACL is not the right place for this. Try the MIME ACL :)
Matt Hubbard has posted a really nice example to exiscanusers a while back:
http://article.gmane.org/gmane.mail.exim.exiscan.user/1846
/tom
