John, et.al.:
There are a lot more MS executable filename extensions. See:
Yes, I know. But I'm watching specific ones on specific viruses. So
my list for a "hard line policy" would be shorter, and presumably a
simpler recipe.
Automatically trashing messages in the bit bucket may be ill
advised,
(these things aren't perfect,) thus the quarantining idea.
I understand, but I want a "no exceptions" policy on my short list of
specific extensions. If someone sends a potentiall offending
attachment, I can live with tossing it. I will quarrantine for a
short while to make sure it's workign of course, but then, out they
go, no questions asked, no notice made.
Alternatively, you could put them in a special mailbox file which
makes sorting through them quick.
Too many, too little resources.
Your script looks very complete but does much more than what I want
(e.g scoring). I want the simplest, most efficient method to delete
(or redirect to quarrantine) any messages with attachments of the
indicated short list of extensions. No scores. If it's got an
attachment with the extension, it wins (gets deleted). As I'm not a
procmail expert (obviously) your's is too much over my head to
simplify. Although I did learn from it.
Any more help? Anyone have something more direct and better than what
I have. But maybe not as broad as Johns? Please assume I ONLY want
to delete .pif, .scr, .com, and .bat.
Thanks again VERY much for the time to help,
Scott
John
scott list writes:
Greetings:
I am not a procmail proficient admin and I need some help. Can
someone tell me an efficient, proper recipie that will simply
delete
ANY incoming mail that has one of the extensions in teh recipe
below?
The one I have below was provided to me a long time ago, but
sometimes
some are getting through. I can live with the risk of the new
".zips"
coming out, but I don't hav ethe HP to run spamassassin, etc. I
simply want to delete, without notice, stripping, etc, any
potential
"bad" attachment as a policy.
I currently have:
#####################
# delete all .pif, .scr, .com, and .bats
:0 B
*^Content-Type:
(audio/x-wav|application/octet-stream|multipart/mixed|audio/x-midi);
*.*name=.*\.(pif|scr|com|bat)
/dev/null
######################
Can someone critique and except for adding other extensions, tell
me
if this is the proper/best way to handle this? DO I have all
possibilities for Content Type, etc. Or is there a more through
way
of catching the attachments?
Thanks VERY much for the time to help,
Scott
--
John Conover, conover(_at_)rahul(_dot_)net, http://www.rahul.net/~conover
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail