Filename rules

[Jerry Thomas]

Hello,

Is there anyway to delete emails with dangerous attachments similar to
the High scoring spam action?

I change the following line in filename.rules.conf

deny    \.pif$  Possible MS-Dos program shortcut attack         Shortcuts to MS-Dos programs are very dangerous in email

deny+delete     \.pif$  deleting pif attachment         -

but after each email I see that the file is being requeued in postfix.
The new queue file is getting corrupted but that's another issue.

I would like to do this with all the virii extenstions since nobody
would ever really send them anyway.

Thanks for the help,
Jerry
--
Jerry Thomas            thomasj at scoregroup.com
I.T. Director           ph. 305-662-5959 ext. 242
The SCORE Group         fax 305-662-8922

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html