reject based on attachment

2009-11-03 Thread Stan Hoeppner
Anyone have a filter they'd like to share that rejects mail at smtp based on known malicious attachment file types? I've been out of the game for a while in this regard. Received a spam today (that squeaked past all my current filters) with a .docx file attached, and I don't even know what that

Re: reject based on attachment

2009-11-03 Thread Charles Marcus
On 11/3/2009 9:13 AM, Stan Hoeppner wrote: Anyone have a filter they'd like to share that rejects mail at smtp based on known malicious attachment file types? I've been out of the game for a while in this regard. Received a spam today (that squeaked past all my current filters) with a .docx

Re: reject based on attachment

2009-11-03 Thread Ralf Hildebrandt
* Stan Hoeppner s...@hardwarefreak.com: Anyone have a filter they'd like to share that rejects mail at smtp based on known malicious attachment file types? Of course .) mime_header_checks: /name=\(.*)\.(386|bat|chm|cpl|cmd|com|do|exe|hta|jse|lnk|msi|ole)\$/ REJECT Unwanted

Re: reject based on attachment

2009-11-03 Thread LuKreme
On 3-Nov-2009, at 07:13, Stan Hoeppner wrote: Anyone have a filter they'd like to share that rejects mail at smtp based on known malicious attachment file types? main.cf: mime_header_checks = pcre:$config_directory/mime_headers.pcre $ cat mime_headers.pcre

reject based on attachment

2009-11-03 Thread Stan Hoeppner
Ralf Hildebrandt put forth on 11/3/2009 8:32 AM: * Stan Hoeppner s...@hardwarefreak.com: Anyone have a filter they'd like to share that rejects mail at smtp based on known malicious attachment file types? Of course .) mime_header_checks:

Re: reject based on attachment

2009-11-03 Thread Ralf Hildebrandt
* Stan Hoeppner s...@hardwarefreak.com: Thanks Ralf. Is smtpd_recipient_restrictions the appropriate place to put mime_header_checks, like this? No. smtpd_recipient_restrictions = It's just: mime_header_checks = pcre:/etc/postfix/mime_header_checks BTW, I can't tell--are these regexp