Re: Seemingly simple postfix chore

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Bill Earl
Date:  
To: plug-discuss
Subject: Re: Seemingly simple postfix chore
Erik,

The instructions on this web page,
http://www.webhits.de/tools/sendmail-postfix-sobig.html, at the very bottom,
are just different enough from what you entered to raise some questions.
(postfix part pasted in below)

First, do you have the mime_header_checks entry in your main.cf file?
Probably, or I don't think it would log things.

Second, the /^\s*Content line is a little different from what you have.
Might be worth a try using this example line they have.

Bill

The generic solution is to disallow certain known to be dangerous attachment
types. In main.cf you must use:
mime_header_checks = regexp:/etc/postfix/mime_header_checks.regexp

and /etc/postfix/mime_header_checks.regexp contains:
/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.+\.(lnk|asd|hlp|ocx|reg|bat|
c[ho]m|cmd|exe|dll|vxd|pif|scr|hta|jse?|sh[mbs]|vb[esx]|ws[fh]|xl))"?\s*$/
REJECT Attachment type not allowed. File "$2" has the unacceptable extension
"$3"

The leading space before REJECT is important!
Don't forget "postfix reload"!


----- Original Message -----
From: "plug" <>
To: <>
Sent: Wednesday, May 12, 2004 1:40 PM
Subject: Seemingly simple postfix chore


> I have a machine filtering spam on SuSE 9.0. I followed the
> instructions from
> http://www.geocities.com/scottlhenderson/spamfilter.html, other than
> putting everything on SuSE 9.0, rather than Redhat. So, the machine is
> running Postfix, AMaViS and Spamassassin. I am trying to block incoming
> e-mail messages with files attached with specific attachments. For the
> sake of troubleshooting, I'm using ".jeb". After googling about how to
> do it, I got the impression this would be a fairly easy task to get
> Postfix to do. Following the instructions, I added the following line
> to my /etc/postfix/header_checks file:



---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss