OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: attachment filtering via header_checks?
From: Ralf Hildebrandt (R.Hildebrandttu-bs.de)
Date: Fri May 05 2000 - 10:48:08 CDT

On Fri, May 05, 2000 at 10:53:06AM -0500, Ben Oldham wrote:
> Is there a way to use header_checks to filter out certain kinds of
> attachments? Specifically, I'd like to do something like:
> /^Content-Disposition: .*\.vbs.*&/ REJECT

Not in Postfix. Attachments are defined in the body, which is not scanned by
header_checks (as the name suggests)

> so as to be able to dump any incoming messages with VB Script
> attachments in them. But this rule doesn't seem to want to work. Is

So you know the answer already :)

> this because the attchment-specific headers are read separately from the
> message headers, and header_checks only checks the message headers? Or
> am I doing something dumb like munging the regexp or something?

Use procmail for local delivery.

Then write a generic procmailrc for all users that drops mails with vbs
attchments in them into postmaster's mailbox who is smart enough to avoid M$
products wherever he can... 

-- 
Ralf Hildebrandt <R.Hildebrandttu-bs.de> www.stahl.bau.tu-bs.de/~hildeb
If you tell them, they never listen. If they listen, they never
learn. If they learn, they never remember. If they remember, they
never obey.