.zip,.exe attachments and spam assassin

[Roger Grosswiler]

> I've gotten a ton of viruses today - there seems to be a worm lose
> again.
>
> I've come to the realization that I have never ever received a zip
> attachment from someone not in my address book that I actually wanted,
> so I would like to set a spam assassin rule to mark mail with a .zip
> or .exe with a high spam score (my address book is white listed)
>
> Anyone know how to do this off hand?
>
> Another possibility would be a procmail rule - I use procmail to filter
> my mail - but since spamassassin already knows about my whitelist, I'd
> rather do it in spamassassin.
>
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>
i did this in postfix:

i added in /etc/postfix/ a file called mime_headers_check with this content:

/^Content-(Disposition|Type).*name\s*=\s*"?(.*\.(
  ade|adp|bas|bat|chm|cmd|com|cpl|crt|dll|exe|hlp|hta|
  inf|ins|isp|js|jse|lnk|mdb|mde|mdt|mdw|msc|msi|msp|mst|nws|
  ops|pcd|pif|prf|reg|scf|scr\??|sct|shb|shs|shm|
  vb[esx]?|vxd|wsc|wsf|wsh))(\?=)?"?\s*(;|$)/x
   REJECT 598 Attachments with Extension ".$3" are rejected and could
contain Viruses!


then i added this in /etc/postfix/main.cf:
header_checks=pcre:/etc/postfix/mime_headers_check

thats it, done...and it works fine :-D

Roger