Re: demime question..

Frank S. Bernhardt said:
> Brian
>
> I do something similar but because I'm on a dynamic link I use discard
> instead of deny:

Why would being on a dynamic link make a difference between discarding and
denying?

Just curious..

...

I use something like this on a number of mail servers...

# If the messae contains SCR or PIF we want to Log this
deny  log_message = VIRUS POTENTIAL DENY: ATTACHMENT ($found_extension)
with Subject: $h_subject
      message = We dont accept mail with attachments of this type
($found_extension)
      demime = scr:pif:exe:com:bat

# Other attachements we don't allow.  We will bounce a message for these
saying so
deny  message = We dont accept mail with attachments of this type
($found_extension)
      log_message = DENY: ATTACHMENT ($found_extension) with Subject:
$h_subject
      demime = ade:adp:bas:chm:cmd:cpl:crt:hlp:hta:\
               inf:ins:isp:js:jse:lnk:mdb:mde:msc:msi:msp:mst:pcd:\
               reg:sct:shs:shb:vb:vbe:vbs:wsc:wsf:wsh

As to why I split them up.... I track them differently in my logs.  The
first are by far more common.

There are many other checks...