limiting regex scanning
Philip Chambers <[email protected]> Wed, 1 Dec 2004 13:06:44 +0000 (GMT Standard Time)
| Newsgroups | gmane.mail.exim.exiscan.user |
|---|---|
| Message-ID | <[email protected]> |
I am new to using exiscan (having used exim for years) and would like to know if it possible to limit the amount of data scanned by regex. I would like to detect base64 encoded encrypted ZIP files in a MIME ACL. That means checking just the first few chracters of the base64 data. If I use regex = ^UEsDB....[Q-Za-fw-z0-9\+/] then all of each attachment will be scanned, with the corresponding CPU usage. It would be nice to be able to restrict the regex to work on just the first dozen bytes of each attachment, which would be quick. Can I do that? If not, can that be put on a wish-list? Phil. --------------------------------------- Phil Chambers ([email protected]) University of Exeter