newbie: demime problem

[email protected] Tue, 28 Sep 2004 18:26:08 -0700 (PDT)
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
Howdy.  I recently installed the exiscan patch on the 4.42 version of
Exim.  I decided to start with some very basic MIME checks (basically a
trimmed version from the examples) before messing with Spam Assassin and
virus scanning.  I almost immediately hit the following problem:

"temporarily rejected during MIME ACL checks: cannot test demime condition
in MIME ACL"

Here is what exim -bh shows as where the problem occurs:

>>> Found content-disposition: MIME header, value is 'inline'
>>> Found content-type: MIME header, value is 'multipart/mixed'
>>> Found boundary= MIME parameter in content-type: header, value is
'Boundary-00=_SAgWBuKsztPhh7A'
>>> using ACL "acl_check_mime"
>>> processing "accept"
>>> check hosts = 127.0.0.1
>>> host in "127.0.0.1"? no (end of list)
>>> accept: condition test failed
>>> processing "deny"
>>> check condition = ${if match {${lc:$mime_filename}}
{\N(\.jpg|\.pdf|\.doc|\.xls|\.bat|\.com|\.exe|\.pif|\.prf|\.scr|\.vbs)$\N}
{1}{0}}
>>>                 = 0
>>> deny: condition test failed
>>> processing "deny"
>>> check demime = *
>>> deny: condition test error
>>> unspool_mbox(): unlinking
'/var/spool/exim/scan/1CCSlV-000GzT-Qg/1CCSlV-000GzT-Qg.eml'
451 Temporary local problem - please try later
LOG: 1CCSlV-000GzT-Qg H=example.com [24.24.24.24]
F=<[email protected]> temporarily rejected during MIME ACL checks:
cannot test demime condition in MIME ACL

The only mention of this error I could find via Google was one thread on
Usenet in Polish and Babelfish couldn't help me out there. 

=)

From what I see here it appears to die on the "demime = *" call which I
thought might be a missing external library or such but I can find nothing
in the docs about that.  Has this syntax changed or am I doing something
silly in my ACL?  Here is all I have it stripped down to at this point:

-----
acl_check_mime:

accept  hosts = 127.0.0.1

deny message   = Blacklisted file extension detected
     condition = ${if match \
                      {${lc:$mime_filename}} \

{\N(\.jpg|\.pdf|\.doc|\.xls|\.bat|\.com|\.exe|\.pif|\.prf|
\.scr|\.vbs)$\N} \
                   {1}{0}}

deny  message = Serious MIME defect detected ($demime_reason)
     demime = *
    condition = ${if >{$demime_errorlevel}{2}{1}{0}}

accept
-----

So unless there is a typo somewhere else I am missing, it looks like my
FreeBSD based install under Exim 4.42 does not like "demime" as an action
for some reason. 

Any ideas?

I appreciate your help.

Cheers

-- 
|)   __,,_____________      moron : <[email protected]>      (|
|)  <     ___________/  EEEI news : <[email protected]>   (|
|)  /   /-'    musician community : http://ampfea.org           (|
|) /___/ industrial & DIY culture : http://industrial.org       (|
|)           deterrent industries : http://deterrent.net        (|