Postfix attachment filter

[schinnan]

Hi,

Is it possible strip attachment from a list of users and allow rest of the users to sned attachment in postfix. The stripped attachment should be moved to some location.

If not postfix is there any other tools that help in doing so. Please help me.

Sanjux

[farslayer]

I currently block certain attachments in postfix, but it's a global settign. I do not quarentine them.

amavis can do it on an individaul or group basis but it's geared towards viruses, not sure if you can tell it to block word docs for instance for specific users.. maybe you can ... http://www.ijs.si/software/amavisd/


anomy sanitizer is another package that works with postfix that has quarantine capabilities..
http://mailtools.anomy.net/


not sure if those will do exactly what you are looking for but it's a place to start.

[Igor Manassypov]

You mentioned that you have a global setting to shred attachments in postfix. Can you share the wisdom on how its done?


Thanks!



-igor

[farslayer]

entry in the main.cf
mime_header_checks = regexp:/etc/postfix/mime_header_checks.regexp


FILE: mime_header_checks.regexp

/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.+\.(lnk|asd|hlp|ocx|reg|bat|c[ho]m|cmd|exe|dll|vxd|pif|scr|hta|jse?|sh[mbs]|vb[esx]|ws[fh]|wav|mov|wmf|xl))"?\s*$/
   REJECT Attachment type not allowed. File "$2" has the unacceptable extension "$3"

That will reject any file with any of those windows executable extensions..
If nothing else it's a good start..

[duke]

Is there anyway use that regex listed above but exclude one address?

[asnani_satish]

stopping attachment type like .exe and .vbs is possible by this regexp. But how do we stop attachments containing images with specific text like "viagra"
---------------------------------------

entry in the main.cf
mime_header_checks = regexp:/etc/postfix/mime_header_checks.regexp


FILE: mime_header_checks.regexp

/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.+\.(lnk|asd|hlp|ocx|reg|bat|c[ho]m|cmd|exe|dll|vxd|pif|scr|hta|jse?|sh[mbs]|vb[esx]|ws[fh]|wav|mov|wmf|xl))"?\s*$/
   REJECT Attachment type not allowed. File "$2" has the unacceptable extension "$3"

That will reject any file with any of those windows executable extensions..
If nothing else it's a good start..