Re: [exim] Stripping attachments on malware condition,

James,

I would like to be able to do your scenarios #1 as well. Have you been
able to get this working? And, maybe scenario 1+, I'd like to remove the
blocked attachment, and replace it with some text stating something like
'The attached file "foo" is of a blocked file type and has been remove.'

Any thoughts or direction would be great.

Thanks,

Dan

Author: James Price
Date: 2008-11-08 05:57 -800
To: exim-users
Subject: Re: [exim] Stripping attachments on malware condition

I agree, I already do that and it works nicely. My thoughts for this
are more for 2 scenarios.
1. demime condition on a blocked file type, many of these messages to
my users are legit but they sent a blocked file type. I'd like to
clean the message of the file and deliver the message.
2. malware condition, would like to be able to strip the attachment
and then deliver safe such as spamassassin does with SPAM, though of
the 2 scenarios, number 1 is my priority.
Thanks,
James

James Price wrote:


I'm sure this has been asked before and I'm sure there are many ways to
do this. From my research I've come up with a few methods and I'm
looking to see what sort of feedback I get.

The options I see that seem to be best suited to what I'm looking to do
is either piping mail to altermime, procmail, or using an exim filter.

Ultimately, I want to drop the attachment from the message malware is
detected.

Any thoughts?