OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix 2.2.4 and renattach 1.2.2 ?

mostlyharmlessoptonline.net
Date: Mon Oct 03 2005 - 18:08:15 CDT


Simon-Bernard Drolet wrote:

>mostlyharmlessoptonline.net wrote:
>
>
>
>>Simon-Bernard Drolet wrote:
>>
>>
>>
>>>Helo,
>>>
>>>I'm currently finishing up our relay mail servers using postfix 2.2.4 on Solaris 9 9/05 servers (V890).
>>>
>>>One request we have is to reject any email with specific extensions. We're already using mime_header_checks to reject .exe, .com, etc... This is working great.
>>>
>>>As for virus/spam, we've integrated Brightmail 6.0.2 into the mix and it's working well.
>>>
>>>The second request is to be able to reject email with files with specific extensions but bundled into an archive attached file (zip) or to "simply" remove the bad files (specific extensions) from the zip but let the mail pass with a stripped zip file.
>>>
>>>I've seen a post about renattach and I'm currently trying to implement it.
>>>
>>>
>>>
>>>
>>>
>>How are you calling renattach?
>>AFAIK,
>>You need to pipe the mail into renattach and renattach will then output the modified email to standard output which you can use the postfix sendmail command line program to reinject the mail back into postfix for final delivery.
>>
>>
>>
>>
>Hello,
>
>Here is the entry from master.cf:
>
>#
>renattach unix - n n - - pipe flags=q user=postrsh argv=/usr/bin/renattach -c /etc/postfix-i/renattach.conf -p /usr/lib/sendmail -i -f ${sender} -- ${recipient}
>#
>
>The call to renattach works without any errors and the mail goes thru. So it's seems to be a problem with the internal zip engine. But some of you are using it, right ?
>
>Thank's.
>
>Simon-Bernard Drolet, Specialiste X inc., 514-247-6741.
>SXi at pppoe dot ca
>Certified Sun Technical Instructor
>Sun Certified System, Network and Security Administrator for Solaris
>
>
>
>
My last suggestion is in your renattach.conf file you add the lines
kill_exe = yes
or
delete_exe = yes
and
search_zip = yes

I'm not familiar enough with the zip engine in renattach to comment any
further.