Hello Jens,
Tuesday, July 9, 2002, 1:15:17 AM, you wrote:
JF> Hi,
JF> i wanna block attachment with maildrop. The mail should be dropped
JF> an sender should receive a notice.
JF> I´ve tried this simple test:
JF> if (/name="*![^"]*\.exe/:b)
JF> {
JF> xfilter "/usr/local/bin/reformail -a'X-Attach: $MATCH2'"
JF> }
JF> Is it a good idea to scan the mail this way ?
JF> Does anyone have a working solution this way, also for *.vbs, *.scr ?
JF> bye,
JF> Jens
JF> -------------------------------------------------------
JF> This sf.net email is sponsored by:ThinkGeek
JF> Oh, it's good to be a geek.
JF> http://thinkgeek.com/sf
JF> _______________________________________________
JF> Courier-maildrop mailing list
JF> Cour...@lists.sourceforge.net
JF> https://lists.sourceforge.net/lists/listinfo/courier-maildrop
From: Gordon Messmer <yinyang@eb...>
Re: Re: Attachment filtering
2002-02-06 23:37
On Mon, 2002-02-04 at 09:16, Bill Michell wrote:
I use the following in my .mailfilter file:
# Quarantine
if( ! /From:.*mydomain.com.au/)
if(/.*name=.*\.exe\"/:b \
|| /.*name=.*\.vbs\"/:b \
|| /.*name=.*\.bat\"/:b \
|| /.*name=.*\.com\"/:b \
|| /.*name=.*\.scr\"/:b \
|| /.*name=.*\.pif\"/:b )
{
to "Maildir/.Quarantine"
}
...
I do not recommend you do this on a busy server, it can load the server.
Ian
I suspect it would load a busy server much less if you did one search for a
more complicated pattern rather than many searches for a simple pattern, as
you have done...
Yeah, I'd be interested in knowing if the load incurred by the above
processing were lessened by a filter like this:
# Quarantine
if( ! /From:.*mydomain.com.au/)
if(/.*name=.*\.(exe|vbs|bat|com|scr|pif)\"/:b )
{
to "Maildir/.Quarantine"
}
Perhaps Ian could try it out and let us know how much difference there
is?
2 messages in net.sourceforge.lists.courier-maildropRe: [maildropl] blocking attachments
