[Esd-l] Selective filtering

[Pierre Etchemaite]

Le Fri, 25 Jul 2003 06:47:15 -0400, Mark Wendt <wendt at kingcrab.nrl.navy.mil>
a écrit :

> 	Had a question posed to me recently, and haven't had much luck
> finding it in the docs.  Can we filter selectively on domains as to
> whether or not a certain file type passes or gets rejected by the
> ESD software?

Just modify settings conditionnally with one or more procmail recipes
before procmail-security gets called. For example:

MANGLE_EXTENSIONS='default list'

0:
* ^From:.*@somedomain.com
* ^Received:.*\[required\.hop\.ip\.number\]
{
  MANGLE_EXTENSIONS='less strict list'
}

INCLUDERC=/etc/procmail/html-trap.procmail


(Modify to your taste.)

Think twice about security implications. Source email can be forged. 

I check both the sender domain and that the email has gone thru some
expected hop. "Received:" headers can be faked too, so it ain't
perfect, just a bit less likely to get bypassed by worms.

BR,
Pierre.