[Mimedefang] Drop mails with pif attachements

Joseph Brennan brennan at columbia.edu
Thu Sep 4 11:33:01 EDT 2003


>>         if ($ext =~ /(pif|scr)/) {
>>             md_graphdefang_log('virus',"bad_filename $fname $type");
>>             return action_bounce("Bad attachment");
>>         }

> Now can you get it to just drop the emails?  Most, if not all, of these
> pif mails are coming from spoofed addresses.



return action_discard()  should do that.  We prefer action_bounce
in case it was not a virus, but it's a judgement call.  I agree
that just about all pif attachments are virus mail.

Joseph Brennan         Columbia University in the City of New York
Academic Technologies Group                   brennan at columbia.edu




More information about the MIMEDefang mailing list