Re: exim4: How to stop viruses at SMTP time

[Paul Johnson <baloo@ursine.ca>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, Oct 17, 2003 at 09:01:28AM -0700, Steve C. Lamb wrote:
> On Fri, Oct 17, 2003 at 08:16:15AM -0700, Paul Johnson wrote:
> >   deny message = Message contains malware or a virus ($malware_name).
> >        log_message = $sender_host_address tried sending $malware_name
> >        demime = *
> >        malware = *
> 
>     Ya know what would be killer here, a way to log the IP to a flat-file so
> we can have a cron job sweep it into shorewall's blacklist file once every 5
> minutes.  :)

I was thinking the same thing, but I decided against something like
that in favor of being surgical about it.  This also prevents
somethings like, say, m.d.o, from getting listed.

- -- 
 .''`.     Paul Johnson <baloo@ursine.ca>
: :'  :    
`. `'`     proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/kBPeUzgNqloQMwcRAn78AKCoRE7VcaATsBPrQhYCYUTSGKvLFgCg4AMd
v8Kc+Grmp1+Vp/YPdUfPlgs=
=mj01
-----END PGP SIGNATURE-----