blocking bmp and zip files

["ip.guy" <ip...@optushome.com.au>]

hi all...

can spamassassin manage attachment rules ?

i'm looking for a way to trap, as spam, any email that has both a *.zip 
and a *.bmp attachment

Re: blocking bmp and zip files

[Michael W Cocke <co...@catherders.com>]

On Mon, 19 Jul 2004 12:48:34 +1000, you wrote:

>LuKreme wrote:
>
>> On 18 Jul 2004, at 19:49, ip.guy wrote:
>> 
>>> Theo Van Dinter wrote:
>>>
>>>> On Mon, Jul 19, 2004 at 11:26:53AM +1000, ip.guy wrote:
>>>>
>>>>> can spamassassin manage attachment rules ?
>>>>
>>>> You can write a plugin for 3.0 pretty trivially. :)
>>>
>>>
>>> i'm running "SpamAssassin version 2.40-cvs"
>> 
>> 
>> So you're what, a two years out of date?  and running a cvs?
>> 
>> 2.40 is seriously out of date and should not be run by anyone, anywhere.
>
>still catching 99.8% (200/300 messages per day) of all spam comming into 
>this place, how bad can it be... in any case, i'm in the process of 
>upgrading.
>
>only needed a few questions answered.
>

Since you seem to have a philosophical problem with using the right
tool for the job, I'm doubtless wasting my time, but if you're using
Amavisd or mimedefang to interface your spam and virus tests to your
mail server, the ability to block files by type is part of them.

Alternatively, you could write a SA rule to block zip and bmp files by
the header signature.

Mike-

--
If you're not confused, you're not trying hard enough.
--
Please note - Due to the intense volume of spam, we have installed 
site-wide spam filters at catherders.com.  If email from you bounces,
try non-HTML, non-encoded, non-attachments,

Re: blocking bmp and zip files

["ip.guy" <ip...@optushome.com.au>]

LuKreme wrote:

> On 18 Jul 2004, at 19:49, ip.guy wrote:
> 
>> Theo Van Dinter wrote:
>>
>>> On Mon, Jul 19, 2004 at 11:26:53AM +1000, ip.guy wrote:
>>>
>>>> can spamassassin manage attachment rules ?
>>>
>>> You can write a plugin for 3.0 pretty trivially. :)
>>
>>
>> i'm running "SpamAssassin version 2.40-cvs"
> 
> 
> So you're what, a two years out of date?  and running a cvs?
> 
> 2.40 is seriously out of date and should not be run by anyone, anywhere.

still catching 99.8% (200/300 messages per day) of all spam comming into 
this place, how bad can it be... in any case, i'm in the process of 
upgrading.

only needed a few questions answered.

Re: blocking bmp and zip files

[LuKreme <kr...@kreme.com>]

On 18 Jul 2004, at 19:49, ip.guy wrote:
> Theo Van Dinter wrote:
>
>> On Mon, Jul 19, 2004 at 11:26:53AM +1000, ip.guy wrote:
>>> can spamassassin manage attachment rules ?
>> You can write a plugin for 3.0 pretty trivially. :)
>
> i'm running "SpamAssassin version 2.40-cvs"

So you're what, a two years out of date?  and running a cvs?

2.40 is seriously out of date and should not be run by anyone, anywhere.


>
-- 
sometimes ascii is the best use of bandwidth... Tonya Engst

Re: blocking bmp and zip files

["ip.guy" <ip...@optushome.com.au>]

Theo Van Dinter wrote:

> On Mon, Jul 19, 2004 at 11:26:53AM +1000, ip.guy wrote:
> 
>>can spamassassin manage attachment rules ?
> 
> 
> You can write a plugin for 3.0 pretty trivially. :)
> 

i'm running "SpamAssassin version 2.40-cvs"

Re: blocking bmp and zip files

[Theo Van Dinter <fe...@kluge.net>]

On Mon, Jul 19, 2004 at 11:26:53AM +1000, ip.guy wrote:
> can spamassassin manage attachment rules ?

You can write a plugin for 3.0 pretty trivially. :)

-- 
Randomly Generated Tagline:
if (instr(buf,sys_errlist[errno]))  /* you don't see this */
              -- Larry Wall in eval.c from the perl source code