[Mimedefang] Milter: data, reject=451 4.7.1 Please try again later

Lu webmaster at hostation.com
Wed May 22 00:37:35 EDT 2002


Thanks Jason,

the latter works great!

You Da Man

Lu

> -----Original Message-----
> From: mimedefang-admin at lists.roaringpenguin.com 
> [mailto:mimedefang-admin at lists.roaringpenguin.com] On Behalf 
> Of Jason Englander
> Sent: Tuesday, May 21, 2002 2:52 PM
> To: mimedefang at lists.roaringpenguin.com
> Subject: RE: [Mimedefang] Milter: data, reject=451 4.7.1 
> Please try again later
> 
> 
> On Tue, 21 May 2002, Lu wrote:
> 
> > I have File::scan installed and configure even recognizes it.
> >
> > However, I do not see anything calling it in mimedefang-filter.
> >
> > Anyone using this?
> >
> > If so, please share with us how you are calling it from 
> > /etc/mail/mimedefang-filter
> 
> If you haven't already, check the mimedefang-filter man page. 
>  In there you'll find info about this one: 
> message_contains_virus_filescan() and this one: 
> entity_contains_virus_filescan($entity)
> 
> At home, where I don't have to answer to anyone else (other 
> than my girlfriend), I'm doing something like this right now:
> 
> 
> filter_begin {
>   # other stuff goes here...
>   $infected_filescan = message_contains_virus_filescan()
>     if $Features{"File::Scan"};
>   # other stuff goes here...
>   if ($infected_filescan) {
>     action_quarantine_entire_message($VirusScannerMessages);
>     return action_bounce('Message contains a known virus');
>   }
>   # other stuff goes here...
> }
> 
> 
> You'll probably want to get further into it than that though. 
>  (see the notes in the man page about $code, $category, 
> $action, etc.)  That very simple example above would reject 
> messages that File::Scan thinks are 'suspicious' too, which 
> you might not want to do.  ...and you might not want to 
> reject them like I'm doing at all.  Running 
> message_contains_virus_filescan in filter_begin and then 
> checking entity_contains_virus_filescan in filter can set you 
> up so you can quarantine just an infected attachment, leaving 
> the rest as-is.
> 
> Maybe something like this:
> 
> filter_begin {
>   $infected_filescan = message_contains_virus_filescan();
> }
> 
> filter {
>   my($entity, $fname, $ext, $type) = @_;
>   if ($infected_filescan) {
>     $VirusScannerMessages = "";
>     if (entity_contains_virus_filescan($entity)) {
>       action_notify_sender(
>         "The attachment $fname was deleted.  It contains a 
> known virus.\n".
>         "Here is the output from the virus 
> scanner:\n$VirusScannerMessages"
>       );
>       return action_quarantine($entity,
>         "The attachment $fname contains a known virus.  It 
> has been\n".
>         "quarantined.  Here is the output from the virus scanner:\n".
>         "$VirusScannerMessages"
>       );
>     }
>   }
> }
> 
>   Jason
> 
> -- 
> Jason Englander
> jason at englanders.cc
> 
> 
> 
> _______________________________________________
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
> 




More information about the MIMEDefang mailing list