Demime problem

Using exim-4.43 exiscan-acl-4.43-28.patch

I have apparently missed something here, and I have searched every where for
an answer and I have been unable to find one.

I have the following in my data acl

deny message = [T=$recipients] This message contains Virus: ($malware_name).
Denied!
     hosts = !/pathto/exemptednets
     demime = *
     malware = *
     condition = ${run{/usr/sbin/ExiBlockWrapper $sender_host_address 1w}\
				{yes}{yes}}

deny  message = [T=$recipients] ${uc:$found_extension} \
				Extentions are indicative of a possible Worm/Trojan/Virus. \
				Refused!
	hosts = !/pathto/exemptednets
      demime = exe:com:vbs:bat:pif:scr:EXE:VBS:BAT:SCR:PIF:COM
	condition = ${run{/usr/sbin/ExiBlockWrapper $sender_host_address 1d}\
				   {yes}{yes}}

demime does not work. I can send the above extensions through all day long,
and no virus
I send is caught. I moved the file extension checks to a mime acl and now I
catch them
but the malware condition is not allowed in the mime acl (temp error stating
so).

I tried adding WITH_OLD_DEMIME=yes (from the test version) to Local/Makefile
but that doesn't work either. SO what is the current, working, method for
detecting a virus during the smtp session?

I checked my exim 4.42 production installations (with the same acls) and
they work fine so this appears to be something introduced in release 4.43.


BTW: The ExiBlock stuff is fine, it's a custom program to auto add hosts to
iptables, among other things.


 Rick Cooper


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.