OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: attachment filtering via header_checks?
From: Ben Oldham (benb-swing.com)
Date: Fri May 05 2000 - 11:25:34 CDT

Ralf Hildebrandt wrote:
>
> On Fri, May 05, 2000 at 10:53:06AM -0500, Ben Oldham wrote:
> > Is there a way to use header_checks to filter out certain kinds of
> > attachments? Specifically, I'd like to do something like:
> > /^Content-Disposition: .*\.vbs.*&/ REJECT
>
> Not in Postfix. Attachments are defined in the body, which is not scanned by
> header_checks (as the name suggests)

> Use procmail for local delivery.
>
> Then write a generic procmailrc for all users that drops mails with vbs
> attchments in them into postmaster's mailbox who is smart enough to avoid M$
> products wherever he can...

hmm. That could work, except that I'm using Cyrus IMAPD with non-user
mail recipients. (By which I mean that none of them have actual
accounts on the box, they're just in a db). So I'm thinking that a
per-user solution isn't going to work well. Is there a "filter all
incoming" kind of program out there? Actually, I'm sure there is, I'm
not just sure _what_ it is...

thanks again.