[Mimedefang] Drop mails with pif attachements
Joseph Brennan
brennan at columbia.edu
Thu Sep 4 11:33:01 EDT 2003
>> if ($ext =~ /(pif|scr)/) {
>> md_graphdefang_log('virus',"bad_filename $fname $type");
>> return action_bounce("Bad attachment");
>> }
> Now can you get it to just drop the emails? Most, if not all, of these
> pif mails are coming from spoofed addresses.
return action_discard() should do that. We prefer action_bounce
in case it was not a virus, but it's a judgement call. I agree
that just about all pif attachments are virus mail.
Joseph Brennan Columbia University in the City of New York
Academic Technologies Group brennan at columbia.edu
More information about the MIMEDefang
mailing list