procmail
[Top] [All Lists]

procmail antivirus recipe trashing messages sent via photo suite

2001-08-03 15:34:47
Hello all,
        We have procmail installed on one of our mail servers to filter out
virii and attachments such as .pif, .bat, etc...  Unfortunately it seems
that my recipe is also trashing any messages sent via the imaging
application Photo Suite.  I have attached a log of what rules it matched
on and also our recipe.  Could someone tell me where in the recipe that
the rule is matching?  How about a workaround?  Thanks for all the help
in advance.

Log:

procmail: [33964] Wed Aug  1 14:13:29 2001
procmail: Assigning "RCDIR=/usr/local/etc"
procmail: Assigning "INCLUDERC=/usr/local/etc/.procmailrc"
procmail: Match on "^Content-type:
(multipart/mixed|application/octet-stream)"
procmail: Extraneous deliver-head flag ignored
procmail: No match on ".*creative\.exe"
procmail: No match on ".*MPDLNOMP\.EXE"
procmail: No match on ".*NDAJLCND\.EXE"
procmail: No match on ".*BILLMIND\.EXE"
procmail: No match on ".*KDDKNHKD\.EXE"
procmail: No match on ".*UNREGASF\.EXE"
procmail: No match on ".*Navidad\.exe"
procmail: Match on ".*\.(vbs|wsf|shs|scr|pif|bat|com)"
procmail: Assigning "LASTFOLDER=/dev/null"
procmail: Opening "/dev/null"
procmail: Notified comsat: "hogdawg(_at_)0:/dev/null"



Recipe:

:0 hBHw
* ^Content-type: (multipart/mixed|application/octet-stream)
{
         :0B
         * .*creative\.exe
         /dev/null

         :0B
         * .*MPDLNOMP\.EXE
         /dev/null

         :0B
         * .*NDAJLCND\.EXE
         /dev/null

         :0B
         * .*BILLMIND\.EXE
         /dev/null

         :0B
         * .*KDDKNHKD\.EXE
         /dev/null

         :0B
         * .*UNREGASF\.EXE
         /dev/null

         :0B
         * .*Navidad\.exe
         /dev/null

         :0B
         * .*\.(vbs|wsf|shs|scr|pif|bat|com|lnk)
         /dev/null

         :0B
         * .*dwarf4you\.exe
         /dev/null

         :0B
         * .*porno\.exe
         /dev/null

         :0B
         * .*joke\.exe
         /dev/null

         :0B
         * .*atchim\.exe

         :0B
         * .*Emanuel\.exe
         /dev/null

         :0B
         * .*NakedWife\.exe
         /dev/null
}



--
Chris

o----< ccook(_at_)tcworks(_dot_)net >------------------------------------o
|Chris Cook - Admin     |TCWORKS.NET - http://www.tcworks.net |
|The Computer Works ISP |FreeBSD - http://www.freebsd.org     |
o-------------------------------------------------------------o
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail