Exim filter .src

[cbwass]

Is there a way to stop Exim from trying to return blocked mail with .src/.pif attachments, I am getting 1000,s every day with spoofed email addresses and they just sit in the queue.
Does anyone know how to make Exim fail or discard them?

 

[ujr]

perhaps this thread will help:

http://forums.cpanel.net/showthread.php?t=1661&highlight=exim+mail+queue

 

[cbwass]

Thanks for the info.
The thread you mention deals with removing them from the queue what I was trying to find out is if there is a way to block or remove mail with certain attachmentes before they arrive stuck in the queue.

 

[chirpy]

You could add them to the list of denied files in /etc/antivirus.exim

 

[cbwass]

I have them in the list of attachments not permited but Exim returns the mail to the sender, this is the problem the sender is usualy a spoofed address and the mail can't be delivered.
Is this what you refer to as 'denied files in /etc/antivirus.exim', or is there another way to deny a file type?

----------
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

[email protected]
This message has been rejected because it has
a potentially executable attachment "message.scr"
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.

 

[ramprage]

Not sending a rejection notice means that anyone trying to send a file listed will never know and result in lost mail.

 

[jwiens]

I believe his question (and mine, since I have the same problem) would be how do we issue SMTP rejections (good!) instead of bouncing the message (bad!).

I also have lots of messages in my queue that were caused by viruses or spam with invalid extensions that should have been more appropriately rejected instead of accepted and then later bounced.