AW: [Mimedefang] Drop mails with pif attachements

Martin Bene martin.bene at icomedias.com
Thu Sep 4 11:48:01 EDT 2003


Hi Matthew,

>>         if ($ext =~ /(pif|scr)/) {
>>             md_graphdefang_log('virus',"bad_filename $fname $type");
>>             return action_bounce("Bad attachment");

>Now can you get it to just drop the emails?  Most, if not all, 
>of these pif mails are coming from spoofed addresses.

action_bounce rejects/bounces at the smtp level, i.e the reception of the
email is denied with an emtp error code. 

No bounce email to a possibly faked sender is generated on the mimedefang
box, the problem of what to do with this undelivered mail rests squarely with
the sending server.

By rejecting at the smtp level you avoid bevoming a "black hole" for emails
if you happen to misconfigure something; should a valid email get bounced,
the sending mailserver can notify the sender. if the sender is an infected
system, it probably won't notify anyone :-)

still, if you really want to tell the sender that the message was received
successfully and then drop it without trace, you can use action_discard
instead of action_bounce.

Bye, Martin




More information about the MIMEDefang mailing list