The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Exim filter .src

Discussion in 'General Discussion' started by cbwass, Oct 26, 2006.

  1. cbwass

    cbwass Well-Known Member

    Joined:
    Mar 29, 2002
    Messages:
    148
    Likes Received:
    0
    Trophy Points:
    16
    Is there a way to stop Exim from trying to return blocked mail with .src/.pif attachments, I am getting 1000,s every day with spoofed email addresses and they just sit in the queue.
    Does anyone know how to make Exim fail or discard them?
     
  2. ujr

    ujr Well-Known Member

    Joined:
    Mar 19, 2004
    Messages:
    290
    Likes Received:
    0
    Trophy Points:
    16
  3. cbwass

    cbwass Well-Known Member

    Joined:
    Mar 29, 2002
    Messages:
    148
    Likes Received:
    0
    Trophy Points:
    16
    Thanks for the info.
    The thread you mention deals with removing them from the queue what I was trying to find out is if there is a way to block or remove mail with certain attachmentes before they arrive stuck in the queue.
     
  4. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    You could add them to the list of denied files in /etc/antivirus.exim
     
  5. cbwass

    cbwass Well-Known Member

    Joined:
    Mar 29, 2002
    Messages:
    148
    Likes Received:
    0
    Trophy Points:
    16
    I have them in the list of attachments not permited but Exim returns the mail to the sender, this is the problem the sender is usualy a spoofed address and the mail can't be delivered.
    Is this what you refer to as 'denied files in /etc/antivirus.exim', or is there another way to deny a file type?

    ----------
    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:

    info@example.com
    This message has been rejected because it has
    a potentially executable attachment "message.scr"
    This form of attachment has been used by
    recent viruses or other malware.
    If you meant to send this file then please
    package it up as a zip file and resend it.
     
  6. ramprage

    ramprage Well-Known Member

    Joined:
    Jul 21, 2002
    Messages:
    667
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Canada
    Not sending a rejection notice means that anyone trying to send a file listed will never know and result in lost mail.
     
  7. jwiens

    jwiens Member

    Joined:
    Mar 8, 2004
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    I believe his question (and mine, since I have the same problem) would be how do we issue SMTP rejections (good!) instead of bouncing the message (bad!).

    I also have lots of messages in my queue that were caused by viruses or spam with invalid extensions that should have been more appropriately rejected instead of accepted and then later bounced.
     
Loading...

Share This Page