* Sebastian Kayser <mls+exim-users@???> wrote:
> I am currently trying to block MIME attachments based on their filename.
>
> deny set acl_m3 = ${lookup {$mime_filename} nwildlsearch \
> {/etc/exim4/list-filenames-reject}}
> condition = ${if def:acl_m3}
> message = This message containes a blacklisted attachment filename
> log_message = DENY: reject_filename ($mime_filename)
>
> warn log_message = DEBUG: acl_check_mime done for \"$mime_filename\" \
> (lookup = $acl_m3)
> condition = ${if def:mime_filename}
>
> Content of /etc/exim4/list-filenames-reject (without leading spaces):
>
> ^Update-.+-x86\.zip
>
> For an attachment named Update-abc-x86.zip the debug message is written
> to the log but the deny condition isn't met.
>
> Warning: DEBUG: acl_check_mime done for "Update-abc-x86.zip" (lookup = )
>
> What am i missing?
Got it. The list was missing a key *doh*.
^Update-.+-x86\.zip "W32/Tricky-Malware-based Win32/Stration"
Sebastian
