[exim] systen-filter again

Pàgina inicial
Delete this message
Reply to this message
Autor: Aram Galestian
Data:  
A: exim-users
Assumpte: [exim] systen-filter again
hello.
I hope Nigel Metheringham can answer my questin..
i have found and read a lot about system-filters now and have try to
found the lastes version of your system-filter.. but can not found any.
the as i have read at exim.org
The old system filter has been deleted from the site - it is not
appropriate for current mail configurations. If you are still using it
please discontinue immediately - it creates severe collateral spam issues
case i have edit my old system filter by removing the "fail Text" from it
so i do not bounce any error messag..
but i have som other issue with some client that use outlook express and
looks like to stop some strange outlook Objcet.. but i do note sure if i
remove my system filer as recommendation from exim.org
will case that exim allow som bad file attachment then ?

I would like to know what is your recommendations or what to do.. case i
did realy love system filter..



file that we stop from outlook Express
Content-Type: application/pdf;
name="LB_10869_;jon.bull@???;_1071712_1_3_08112005132635.pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="LB_10869_;jon.bull@???;_1071712_1_3_08112005132635.pdf"


# same again using unquoted filename [body_unquoted_fn_match]
if $message_body matches 
"(?:Content-(?:Type:(?>\\\\s*)[\\\\w-]+/[\\\\w-]+|Disposition:(?>\\\\s*)attachment);(?>\\\\s*)(?:file)?name=|begin(?>\\\\s+)[0-7]{3,4}(?>\\\\s+))(\\\\S+\\\\.(?:ad[ep]|ba[st]|chm|cmd|com|cpl|crt|eml|exe|hlp|hta|in[fs]|isp|jse?|lnk|md[be]|ms[cipt]|pcd|pif|reg|scr|sct|shs|url|vb[se]|ws[fhc]))[\\\\s;]"
then
  save /var/spool/exim/SApermreject/embeddedmimeattachement 0644
  logfile /var/log/maillog 0644
  logwrite "$tod_log $message_id envelope: $sender_address, From: $h_from 
($sender_host_name[$sender_host_address]) => $recipients 
(recipients=$recipients_count)  subject=$header_subject\n$message_headers"
    seen finish
  endif