[Mimedefang] Drop mails with pif attachements

[Matthew Thomas]

> -----Original Message-----
> From: mimedefang-admin at lists.roaringpenguin.com 
> [mailto:mimedefang-admin at lists.roaringpenguin.com] On Behalf 
> Of Joseph Brennan
> Sent: Thursday, September 04, 2003 7:22 AM
> To: mimedefang at lists.roaringpenguin.com
> Subject: RE: [Mimedefang] Drop mails with pif attachements
<snip>
> We do it with this.  (It's logged as "virus"... I know it's 
> possible pif and scr are not virus, but we classify the 
> reason for rejection as "virus".)
> 
>     if (filter_bad_filename($entity)) {
> 
>         if ($ext =~ /(pif|scr)/) {
>             md_graphdefang_log('virus',"bad_filename $fname $type");
>             return action_bounce("Bad attachment");
>         }
> 
>         #  whatever else you do with filter_bad_filename()  ...
> 
>     }
> 
> 
> 
> Joseph Brennan         Columbia University in the City of New York
> Academic Technologies Group                   brennan at columbia.edu


Thanks, Joseph, this works.

Now can you get it to just drop the emails?  Most, if not all, of these pif
mails are coming from spoofed addresses.

Thanks,
Matt