[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Exim4 + ClamAV + Some Virii get through



On Tue, Aug 03, 2004 at 07:27:39AM +0100, Alan Chandler wrote:
> On Tuesday 03 August 2004 02:25, David Purton wrote:
> ...
> >
> > It offers these lines, which might help in
> > /etc/exim4/conf.d/acl/40_exim4-config_check_data:
> >
> >
> > deny message = This message contains malformed MIME ($demime_reason)
> >   demime = *
> >   condition = ${if >{$demime_errorlevel}{2}{1}{0}}
> 
> This needs exim4-heavy to be installed which includes a patch to connect to 
> virus checkers.
> 
> You also need 
> 

<SNIP>

Yeah - this is all fine - sorry perhaps my original email was not clear.
It all works fine - Normally Virus block and spam blocking occurs
without a hitch.

It's only on these special occasions where exim seems unable to properly
extract the Virus to pass to clamav due to what I assume is deliberate
breaking of the way the Virus is attached.

So my question is will the above rule block this sort of message
and will it block any legitimate messages?

cheers

dc

-- 
David Purton
dcpurton@chariot.net.au
 
For the eyes of the LORD range throughout the earth to
strengthen those whose hearts are fully committed to him.
                                 2 Chronicles 16:9a

Attachment: signature.asc
Description: Digital signature


Reply to: