Re: [exim] Problem with Mime attachment checking

Top Pagina
Delete this message
Reply to this message
Auteur: Mike Brudenell
Datum:  
Aan: exim-users@exim.org
Onderwerp: Re: [exim] Problem with Mime attachment checking
Hi,

I'm pretty sure it's unrelated to you not getting the warning message, but
there's an error in your *match* pattern: you have two consecutive vertical
bars between the dll and pdf extensions (albeit with a line continuation
inbetween).

In passing, as all the file type patterns begin with "." you could factor
that out to before the list of alternatives:

condition = ${if match {${lc:$mime_filename}} \
                       {\N\.(exe|scr|bat|com|lnk|pif|reg|vbs|vb|vbe|dll|
pdf|chm)$\N}}


To see what's in the $mime_filename variable and work out what's going on
it might be an idea to:

1. Create a test message that exhibits the problem when you send it;
2. Run up an Exim listener on a test host with debug options turned on;
3. Send your test message to the test system;
4. Look through the debugging output of Exim: this contains a wealth of
information such as what values are being substituted into string
expansions, tests, etc and lets you see exactly what is being tested where
and the results.

It can help if you have a second window open to view your configuration
file as you read through the debugging output, following the logic through.

The easiest way is to run Exim with verbose mode and all debugging enabled:
this gives you everything, is very verbose, but can help you trace through
your configuration file. Alternatively be more selective what options you
turn on.

exim -v -d+all -bd


*All:* Is there also a possible problem with the space character before the
"\" continuation character after the dll file type? When I've written LDAP
expressions before I remember having to be very careful not to put spaces
before the continuation character in some places because they didn't get
stripped by Exim's usual leading/trailing whitespace stripper: they were
considered important and part of the pattern.

Cheers,
Mike B-)

On 6 April 2017 at 17:25, Sujit Acharyya-choudhury <s.choudhury@???>
wrote:

> I am having problem with Mime attachment checking with Exim 4.80 on
> Solaris.
> The following code is in place and I am not getting the Warning message:
>
>
>
> in the main settings:
>
>
>
> acl_smtp_rcpt = acl_check_rcpt
>
> acl_smtp_data = acl_check_data
>
> acl_smtp_mime = acl_check_mime
>
>
>
> acl_check_mime:
>
> # pdf is just for test
>
> warn
>
>
>
>         condition = ${if match{${lc:$mime_filename}} \

>
> {\N(\.exe|\.scr|\.bat|\.com|\.lnk|\.pif|\.reg|\.vbs|\.vb|\.vbe|\.dll| \
>
> |\.pdf|\.chm)$\N} \
>
>         {1}{0}}

>
>         message = WARNING: Bad MIME attachment filename ($mime_filename)

>
>         log_message = WARNING: Bad MIME attachment filename
> ($mime_filename)

>
> accept
>
>
>
>
>
> # ACL that is used after the DATA command
>
> acl_check_data:
>
>
>
>    deny    malware    = *

>
>            message    = This message contains a virus ($malware_name).

>
>
>
>
>
> However, If I move the checking in the acl_check_data, then it gives the
> warning message. Any idea?
>
>
>
>
>
>
>
> Thanks in advance
>
>
>
> Sujit Choudhury | IT Services
>
> Birkbeck, University of London
>
>
>
>
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>




--
Systems Administrator & Change Manager
IT Services, University of York, Heslington, York YO10 5DD, UK
Tel: +44-(0)1904-323811

Web: www.york.ac.uk/it-services
Disclaimer: www.york.ac.uk/docs/disclaimer/email.htm