Exiscan & detecting MIME attachments

"Carl Inglis" <[email protected]> Fri, 11 Feb 2005 13:49:37 -0000
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
I posted this to the Exim-Users mailing list and Tom (and David) were=0D=0A=
kind enough to suggest I use exiscan.=0D=0A=0D=0A> I've been asked by manag=
ement (always a worrying way to start an=0D=0Aemail)=0D=0A> to setup a meth=
od of detecting attachments entering and leaving the=0D=0A> company via ema=
il. I've written a perl script to accept a message on=0D=0A> STDIN, break i=
t down into its parts if it's MIME, detect if any of its=0D=0A> parts are n=
on text/*, send an email to a nominated address and return=0D=0A> the messa=
ge unedited on its STDOUT.=20=0D=0A=0D=0AI've looked at the documentation a=
nd as far as I can see the acl would=0D=0Abe called once per MIME part. If =
my understanding is correct, is there a=0D=0A"no_more" flag that I can set =
to say to the acl to only be called once=0D=0Aper message=3F Otherwise I'm =
going to get one email (see above) per MIME=0D=0Apart, and some of these em=
ails have 10's of embedded images [sigh].=0D=0A=0D=0AThanks,=0D=0A=0D=0ACar=
l=0D=0A--=20=0D=0ACarl C. Inglis=0D=0AIT Systems Administrator=0D=0ATotal R=
ecruitment/Skillwise Ltd.=0D=0AHelp Desk: 01724 273350=0D=0A---------------=
---------------------------------------------------------------------------=
--------------------------=0D=0AThis email and any files transmitted with i=
t are confidential and=0D=0Aintended solely for the use of the individual o=
r entity to whom=0D=0Athey are addressed.=0D=0A=0D=0AIf you have received t=
his email in error please notify the=0D=0Aoriginator of the message. This f=
ooter also confirms that this=0D=0Aemail message has been scanned for the p=
resence of computer viruses.=0D=0A=0D=0AAny views expressed in this message=
 are those of the individual=0D=0Asender, except where the sender specifies=
 and with authority,=0D=0Astates them to be the views of Total Recruitment =
Group.=0D=0A=0D=0AScanning of this message and addition of this footer is p=
erformed=0D=0Aby SurfControl SuperScout Email Filter software in conjunctio=
n with=20=0D=0Avirus detection software.=0D=0A