antivirus.exim

[SACHIN]

HI,


i Have enabled antivirus.exim it is for gloabl filter.

if i would like to allow perticuler domain without this filter is it possible?
antivirus.exim rules should discard or delete or reject mails of perticuler domain name
how can i do this?

 

[mohit]

hi,
i see you are asking two question different from each other.

Do you want to allow some domain to bypass the filter and get all mails ?
Do You wish to discard all incoming mails on a domain ?

if you want to bypass "antivirus.exim" there's a bypass command mentioned in the thread explaining the antivirus.exim here.

if you want to completely discard emails on a domain, why not close all mail accounts on that domain, accepting mails and then filtering with this central filter is waste of time/resource.

See ya,
mohit

 

[SACHIN]

HI,


I would like to bypass antivirus.exim only.


#!!# message_filter renamed system_filter
system_filter = /etc/antivirus.exim
message_body_visible = 5000

where should enter domain name for bypass antivirus.exim filter?


Thank you,

 

[khoonchee]

Have you figure this out? I am looking for this as well

 

[ramprage]

Could you not do something like:

Create /etc/antivirus_whitelist

Put the domains in this file:


At the top of exim box in WHM.

hostlist antivirus_whitelist = lsearch;/etc/antivirus_whitelist


Then check for

system_filter = /etc/antivirus.exim


Then add below it.
!hosts = +antivirus_whitelist



NOT tested, just a suggestion




Edit: that doesn't work:

Exim configuration error in line 128 of /etc/exim.conf:
option setting expected: !hosts = +antivirus_whitelist

 

[ramprage]

I tried a bunch of other central_filter settings and even a nested if/else statement in the antivirus.exim file but nothing seemed to work. If I were to spend some more time on it I'm sure I could figure it out for you.

 

[Un Area]

We use antivirus.exim to block "stock spam" (the readable ones, not image spam) with success. If anyone likes the rule just send a PM.

Thanks

 

[mickalo]

We use antivirus.exim to block "stock spam" (the readable ones, not image spam) with success. If anyone likes the rule just send a PM.

Thanks

why PM you .... are they top secret :p

Mickalo