[Mimedefang] Using values in X- headers for filtering

[Kelson Vibber]

At 01:00 PM 8/20/2003, Jim McCullars wrote:
<snip>
>         if(/^X-MailScanner.+clean/) {
>           close(HDR);
>           return action_bounce("This email exhibits characteristics of 
> the SoBig virus - rejected");

This is not a good idea.  AFAIK, this will also trigger on any mail that 
really is scanned by MailScanner and is found to be clean.

It's kind of like bouncing everything that claims to be sent by Outlook 
based on the fact that a virus impersonates Outlook.


Kelson Vibber
SpeedGate Communications <www.speed.net>