Re: [exim] demime -> acl_smtp_mime

Top Page
Delete this message
Reply to this message
Author: Victor Ustugov
Date:  
To: Marco Gaiarin via Exim-users
Subject: Re: [exim] demime -> acl_smtp_mime
Marco Gaiarin via Exim-users wrote on 13.09.2018 18:45:
> Mandi! Lena--- via Exim-users
> In chel di` si favelave...
>
>> No way I think. I'm curious: how often did you see messages triggering
>> this rejection?
>
> Oh, probably never... but indeed seems good to reject messages with a
> defective MIME structure...
>
>
>> More elaborate checks:
>
> Thanks for the hint. Very interesting recipe... but still the question
> remain.


Try to use $mime_anomaly_level and $mime_anomaly_text


> My current mime ACL is:
>
> acl_smtp_mime:
>
>   # Decode MIME parts to disk.
>   warn
>     decode = default

>
>   # Unpack MIME containers and reject file extensions used by worms.
>   .ifdef LOCAL_FORBIDDEN_EXTENSIONS
>   deny
>     message = '$mime_filename' files are not accepted here
>     !acl = acl_local_deny_exceptions
>     condition = ${if match {${uc:$mime_filename}}{[.] *(LOCAL_FORBIDDEN_EXTENSIONS)\$}}
>   .endif

>
> # accept otherwise
> accept
>
>
> So probably the first instance can be simply converted to:
>
>   # Decode MIME parts to disk. Deny on errors.
>   deny
>     message = Serious MIME defect detected
>     decode = default

>
> but i suppose it, and also i'm asking if there's some 'status' on decode
> error, as '$demime_reason' was.
>
> Thanks.
>



-- 
Best wishes
Victor Ustugov        mailto:victor@corvax.kiev.ua
public GnuPG/PGP key: https://victor.corvax.kiev.ua/corvax.asc
Skype ID: corvax_nb   JID: victor@???