> Like the demime option, that statement about clamav is
> obsolete. Clamav does a pretty good job at unpacking mime
> containers these days.
>
> - Marc
I agree about ClamAv -- we don't check with ClamAV until
"DATA"-time and then just the entire message.
What about checking (easily) for malformed mime though?
deny message = Malformed MIME ($demime_reason).
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
logwrite = :reject: H=$sender_fullhost: \
Malformed mime [$demime_reason]
I follow the above with lots of checks on bad MIME
and problems like long lines lengths, bad bounaries,
etc.
And should file illegal file extensions be checked
in the MIME ACL rather than all at one with DEMIME
in the DATA ACL?
[Note, I am not arguing AT ALL, but merely looking
for a good way to do such things.]
--
Herb Martin
