From owner-ietf-mta-filters Mon Feb 3 06:31:52 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13EVqU24967 for ietf-mta-filters-bks; Mon, 3 Feb 2003 06:31:52 -0800 (PST) Received: from shadow.alternex.com.br (shadow.alternex.com.br [200.219.63.20]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13EVpd24963 for ; Mon, 3 Feb 2003 06:31:51 -0800 (PST) Received: from legolas.alternex.com.br (legolas.alternex.com.br [200.219.25.45]) by shadow.alternex.com.br (Postfix) with ESMTP id D590B226DA for ; Mon, 3 Feb 2003 12:31:01 -0200 (BRST) Date: Mon, 3 Feb 2003 12:31:51 -0200 (BRST) From: Paulo Sousa To: ietf-mta-filters@imc.org Subject: extensions and sieve Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Hi Anyone could help me? I need filter mails by extensions (.exe .vbs ....). How i can do a rule to this? Thanks Paulo Sousa From owner-ietf-mta-filters Mon Feb 3 12:56:27 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13KuR011719 for ietf-mta-filters-bks; Mon, 3 Feb 2003 12:56:27 -0800 (PST) Received: from starship.enterprise.ucs.ed.ac.uk (starship.enterprise.ucs.ed.ac.uk [129.215.40.70]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13KuNd11712 for ; Mon, 3 Feb 2003 12:56:23 -0800 (PST) Received: from nigelhome (pc-80-195-14-206-ed.blueyonder.co.uk [80.195.14.206]) by enterprise.ucs.ed.ac.uk (Rockliffe SMTPRA 5.2.3) with ESMTP id ; Mon, 3 Feb 2003 20:56:22 +0000 Message-ID: <003a01c2cbc6$d3a9f810$ce0ec350@nigelhome> From: "Nigel Swinson" To: "Paulo Sousa" Cc: References: Subject: Re: extensions and sieve Date: Mon, 3 Feb 2003 20:57:12 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2720.3000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: > Anyone could help me? I need filter mails by extensions (.exe .vbs ....). > How i can do a rule to this? The Sieve spec doesn't natively support any kind of test on the content of the message, only the headers, envelope and size of the message. Sieve is currently not MIME aware at all. However some implementation have some kind of X_body test that allows you to search against the body of the message, but it's all a bit of kludge. It's only really worthwhile if it's available in conjunction with the regex extension, and even then it becomes extremely CPU intensive, and a problem for the server. The better solution is to wait for us to knock together some kind of mime aware syntax that allows us to say "emails that contain attachments of type X"... Doing this with MailSite for example, involves following the advice found in the following KB articles: http://www.rockliffe.com/support/docs/html/1/00/10039.asp http://www.rockliffe.com/support/docs/html/1/00/10078.asp The KB articles describe how to enter the filters into the gui, but if you click the "advanced" button then you get to see the Sieve it produces in all it's glory. BTW, this list is NOT designed to answer this kind of query... it's for discussion and creation of new Sieve standards/specs. Advice on this kind of thing should be solicited from your mail server provider. Cheers Nigel From owner-ietf-mta-filters Mon Feb 3 13:45:43 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13LjhK13267 for ietf-mta-filters-bks; Mon, 3 Feb 2003 13:45:43 -0800 (PST) Received: from kathmandu.sun.com (kathmandu.sun.com [192.18.98.36]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13LjZd13261 for ; Mon, 3 Feb 2003 13:45:35 -0800 (PST) Received: from elephant.West.Sun.COM ([129.153.12.10]) by kathmandu.sun.com (8.9.3+Sun/8.9.3) with ESMTP id OAA01520 for ; Mon, 3 Feb 2003 14:45:37 -0700 (MST) From: Kristin.Hubner@sun.com Received: from orth.west.sun.com (SYSTEM@orth [129.153.12.42]) by elephant.West.Sun.COM (8.12.2+Sun/8.12.2/ENSMAIL,v2.2) with ESMTP id h13LjBbH015696 for ; Mon, 3 Feb 2003 13:45:36 -0800 (PST) Received: from orth.west.sun.com by orth.west.sun.com (PMDF V6.0-24 #30494) id <01KS03SI7CDC8X1F84@orth.west.sun.com> for ietf-mta-filters@imc.org; Mon, 03 Feb 2003 13:45:10 -0800 (PST) Date: Mon, 03 Feb 2003 13:20:31 -0800 (PST) Subject: Re: extensions and sieve In-reply-to: "Your message dated Mon, 03 Feb 2003 20:57:12 +0000" <003a01c2cbc6$d3a9f810$ce0ec350@nigelhome> To: Paulo Sousa Cc: Nigel Swinson , ietf-mta-filters@imc.org Message-id: <01KS04Q15U8K8X1F84@orth.west.sun.com> MIME-version: 1.0 Content-type: TEXT/PLAIN; charset=iso-8859-1 References: Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: In addition to what Nigel Swinson wrote: > > Anyone could help me? I need filter mails by extensions (.exe .vbs ....). > > How i can do a rule to this? > The Sieve spec doesn't natively support any kind of test on the content of > the message, only the headers, envelope and size of the message. Sieve is > currently not MIME aware at all. > However some implementation have some kind of X_body test that allows you to > search against the body of the message, but it's all a bit of kludge. It's > only really worthwhile if it's available in conjunction with the regex > extension, and even then it becomes extremely CPU intensive, and a problem > for the server. > The better solution is to wait for us to knock together some kind of mime > aware syntax that allows us to say "emails that contain attachments of type > X"... In the meantime, note that for a message that is in MIME format, you can hope that perhaps the filename will show up in a MIME header line. For instance, filenames are sometimes in a NAME parameter on a Content-type: header line, or in a FILENAME parameter on the Content-disposition: header line, or occasionally filenames will even get put on the Content-description: header line. So you could try doing something like: if header :contains ["Content-type", "Content-disposition", "Content-description"] ".vbs" { ...some action... } but of course note that that's only going to apply in cases where incoming messages are in MIME format, and happen to have the filename explicitly advertised on one of the listed MIME header lines. So depending upon what sorts of incoming messages you're dealing with, this may or may not be useful. Regards, Kristin > Doing this with MailSite for example, involves following the advice found in > the following KB articles: > http://www.rockliffe.com/support/docs/html/1/00/10039.asp > http://www.rockliffe.com/support/docs/html/1/00/10078.asp > The KB articles describe how to enter the filters into the gui, but if you > click the "advanced" button then you get to see the Sieve it produces in all > it's glory. > BTW, this list is NOT designed to answer this kind of query... it's for > discussion and creation of new Sieve standards/specs. Advice on this kind > of thing should be solicited from your mail server provider. > Cheers > Nigel From owner-ietf-mta-filters Mon Feb 3 14:08:13 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13M8D214121 for ietf-mta-filters-bks; Mon, 3 Feb 2003 14:08:13 -0800 (PST) Received: from darius.cyrusoft.com (darius.cyrusoft.com [63.163.82.2]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13M8Bd14117 for ; Mon, 3 Feb 2003 14:08:11 -0800 (PST) Received: from PLATO.cyrusoft.com (localhost [127.0.0.1]) by darius.cyrusoft.com (8.9.3/8.9.3) with ESMTP id RAA24104; Mon, 3 Feb 2003 17:04:55 -0500 (EST) Date: Mon, 03 Feb 2003 17:08:45 -0500 From: Cyrus Daboo To: Kristin.Hubner@sun.com cc: ietf-mta-filters@imc.org Subject: Re: extensions and sieve Message-ID: <15212264.1044292125@PLATO.cyrusoft.com> In-Reply-To: <01KS04Q15U8K8X1F84@orth.west.sun.com> References: <01KS04Q15U8K8X1F84@orth.west.sun.com> X-Mailer: Mulberry/3.0.0 (Win32) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Hi Kristin.Hubner@sun.com, --On Monday, February 03, 2003 1:20 PM -0800 Kristin.Hubner@sun.com wrote: | In the meantime, note that for a message that is in MIME format, you can | hope that perhaps the filename will show up in a MIME header line. For | instance, filenames are sometimes in a NAME parameter on a Content-type: | header line, or in a FILENAME parameter on the Content-disposition: | header line, or occasionally filenames will even get put on the | Content-description: header line. So you could try doing something like: | | if header :contains | ["Content-type", "Content-disposition", "Content-description"] ".vbs" { | ...some action... } | | but of course note that that's only going to apply in cases where incoming | messages are in MIME format, and happen to have the filename explicitly | advertised on one of the listed MIME header lines. So depending upon what | sorts of incoming messages you're dealing with, this may or may not be | useful. That won't work in general. The 'header' test is done only over the top-level rfc2822 headers and not on any MIME headers embedded in the message when it is a multipart. Thus any multiparts will not be caught by this and I think that will be the majority of cases. -- Cyrus Daboo From owner-ietf-mta-filters Mon Feb 3 15:14:30 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13NEUf15602 for ietf-mta-filters-bks; Mon, 3 Feb 2003 15:14:30 -0800 (PST) Received: from spork.sendmail.com (spork.Sendmail.COM [209.246.26.39]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13NEPd15597 for ; Mon, 3 Feb 2003 15:14:29 -0800 (PST) Received: from foon.sendmail.com (smtp.sendmail.com [209.246.26.40]) by spork.sendmail.com (Switch-2.2.5/Switch-2.2.4) with ESMTP id h13NE7w03706 (using TLSv1/SSLv3 with cipher EDH-RSA-DES-CBC3-SHA (168 bits) verified OK); Mon, 3 Feb 2003 15:14:08 -0800 (PST) Received: from jutta.sendmail.com (shell.Sendmail.COM [209.246.26.38]) by foon.sendmail.com (Switch-3.0.2/Switch-3.0.0) with ESMTP id h13NE6Rn032234; Mon, 3 Feb 2003 15:14:07 -0800 Received: by jutta.sendmail.com (Postfix, from userid 500) id 9FF60179C4; Mon, 3 Feb 2003 15:13:30 -0800 (PST) Date: Mon, 3 Feb 2003 15:13:30 -0800 From: Jutta Degener To: ietf-mta-filters@imc.org Cc: Kristin.Hubner@sun.com Subject: Re: extensions and sieve Message-ID: <20030203231330.GB1511@jutta.sendmail.com> References: <01KS04Q15U8K8X1F84@orth.west.sun.com> <15212264.1044292125@PLATO.cyrusoft.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <15212264.1044292125@PLATO.cyrusoft.com> User-Agent: Mutt/1.3.24i X-Filtered: Sendmail MIME Filter v2.3.1 foon.sendmail.com h13NE6Rn032234 Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Seems a lot of people have asked for this. So, here's a bit of wording to play with. Two issues I can think of: - I really don't like applying regexes to something with a comment and quote syntax. Therefore, I'd like a :param parameter that can be used to select a Content-Disposition or Content-Type parameter (so you'd check for :param "filename" in the example) rather than trying to just match them with :contains or worse. (The grammar describing what :param means can probably be done better.) But maybe this is overkill. - RFC 2047 prohibits RFC 2047-encoding of filenames. (They're not the right kind of token.) In reality, many clients do RFC 2047-encode and -decode names, and I think sieve code matching against file names in order to prevent use of certain extensions needs to, ironically, RFC 2047-decode the wrong tokens in spite of what the RFC itself says. I'm not sure about the right wording there. Here's a hasty first draft: Test mimeheader Syntax: mimeheader [:param ] [COMPARATOR] [MATCH-TYPE] The "mimeheader" test evaluates to true if any of the values of the named MIME headers match any of the keys. The type of match is specified by the optional [MATCH-TYPE] argument, which defaults to ":is", as specified in section 2.6 of [SIEVE]. Like the "header" test, this test returns true if any combination of the string-list and key-list arguments match. Also like "header", a MIME header listed in the header-names argument contains the empty string key if and only if it exists. Unlike the "header" test, the headers matching the "mimeheader" test can occur either in the outermost RFC2822 header or in any of the contained MIME parts. (They must occur in the header section of a MIME part; the matching algorithm MUST disregard the text contained in MIME bodies.) If the optional :param keyword is present, all matching headers are interpreted as if they had the syntax *(token / ) *(; name=value) similar of the Content-Type and Content-Disposition header, and the value used for the sake of comparison is that of the parameter whose name case-insensitively matches any of the specified names. Jutta From owner-ietf-mta-filters Mon Feb 3 16:12:39 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h140CdP17066 for ietf-mta-filters-bks; Mon, 3 Feb 2003 16:12:39 -0800 (PST) Received: from mail.uni-bielefeld.de (IDENT:72@mail2.uni-bielefeld.de [129.70.4.90]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h140CWd17062 for ; Mon, 3 Feb 2003 16:12:33 -0800 (PST) Received: from 192.168.0.3 (ppp36-76.hrz.uni-bielefeld.de [129.70.36.76]) by mail.uni-bielefeld.de (Sun Internet Mail Server sims.4.0.2000.10.12.16.25.p8) with ESMTP id <0H9R00MAKCKI1F@mail.uni-bielefeld.de> for ietf-mta-filters@imc.org; Tue, 4 Feb 2003 01:12:33 +0100 (MET) Date: Tue, 04 Feb 2003 00:53:51 +0100 From: Marc Mutz Subject: Re: extensions and sieve In-reply-to: <20030203231330.GB1511@jutta.sendmail.com> To: ietf-mta-filters@imc.org Message-id: <200302040053.51693@sendmail.mutz.com> Organization: KDE MIME-version: 1.0 Content-type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_PEwP+fRpHixpUT3"; charset="iso-8859-1" Content-transfer-encoding: 7bit User-Agent: KMail/1.5.9 X-PGP-Key: 0xBDBFE838 References: <15212264.1044292125@PLATO.cyrusoft.com> <20030203231330.GB1511@jutta.sendmail.com> Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --Boundary-02=_PEwP+fRpHixpUT3 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Description: signed data Content-Disposition: inline On Tuesday 04 February 2003 00:13, Jutta Degener wrote: > But maybe this is overkill. It isn't, but this is: > - RFC 2047 prohibits RFC 2047-encoding of filenames. > (They're not the right kind of token.) > > In reality, many clients do RFC 2047-encode and -decode names, > and I think sieve code matching against file names in order > to prevent use of certain extensions needs to, ironically, > RFC 2047-decode the wrong tokens in spite of what the RFC itself > says. They should decode rfc2231, of course, but leave rfc2047 alone in=20 parameters. The only client I am aware of that is so broken to produce=20 rfc2047 in parameter values is - guess what - Outlook (I think mutt had=20 this bug in one or two minor revisions, too, but I don't know, so I=20 won't claim it). As a general note, this mimeheader searching is of course failing for=20 encrypted content, so if you try to filter out .vbs (which, I suppose,=20 are VisualBasic scripts), you're better off hooking up a custom=20 solution (read: ADKs, bah!) into your Sieve engine's spamtest/virustest=20 framework. Marc =2D-=20 History teaches that grave threats to liberty often come in times of urgency, when constitutional rights seem too extravagant to endure. -- Justice Thurgood Marshall, 1989 --Boundary-02=_PEwP+fRpHixpUT3 Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQA+PwEP3oWD+L2/6DgRAoe4AKCoVoP1Uk+XRBIKte+C7rBMhNAHeACgx4+y nDzORal4ZNmUaC4Q1L7IinI= =JGJA -----END PGP SIGNATURE----- --Boundary-02=_PEwP+fRpHixpUT3-- From owner-ietf-mta-filters Tue Feb 4 06:24:50 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h14EOoj11745 for ietf-mta-filters-bks; Tue, 4 Feb 2003 06:24:50 -0800 (PST) Received: from mail.uni-bielefeld.de (IDENT:72@mail2.uni-bielefeld.de [129.70.4.90]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h14EOmd11738 for ; Tue, 4 Feb 2003 06:24:48 -0800 (PST) Received: from dirichlet.Physik.Uni-Bielefeld.DE (dirichlet.Physik.Uni-Bielefeld.DE [129.70.125.234]) by mail.uni-bielefeld.de (Sun Internet Mail Server sims.4.0.2000.10.12.16.25.p8) with ESMTP id <0H9S009AQG153V@mail.uni-bielefeld.de> for ietf-mta-filters@imc.org; Tue, 4 Feb 2003 15:24:41 +0100 (MET) Date: Tue, 04 Feb 2003 15:10:26 +0100 From: Marc Mutz Subject: [managesieve] setactive "" semantics questions To: ietf-mta-filters@imc.org Message-id: <200302041510.27475@sendmail.mutz.com> Organization: KDE MIME-version: 1.0 Content-type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_Tn8P+smFRSRbI15"; charset="us-ascii" Content-transfer-encoding: 7bit User-Agent: KMail/1.5.9 X-PGP-Key: 0xBDBFE838 Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --Boundary-02=_Tn8P+smFRSRbI15 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Content-Description: signed data Content-Disposition: inline Hi! from draft-martin-managesieve-04: 2.8. SETACTIVE Command This command sets a script active. If the script name is the empty string (i.e. "") then any active script is disabled. If the script does not exist on the server then the server MUST reply with a NO response. What does that mean for setactive "" when no script is active? Should it fail or succeed? (The latter would=20 be a PITA for client implementors, since I need to LISTSCRIPTS before=20 any SETACTIVE ""). And: Do I need to issue setactive "" between setactive "foo" setactive "bar" or will the second command implicitely set "foo" to inactive? Marc =2D-=20 They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin --Boundary-02=_Tn8P+smFRSRbI15 Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQA+P8nT3oWD+L2/6DgRAp+fAJ9RybWLfrJKSfLiP0DVj58GbkDuBACfbkzB t6r2yoDv7/bdgK1ljBHn08U= =O9kN -----END PGP SIGNATURE----- --Boundary-02=_Tn8P+smFRSRbI15-- From owner-ietf-mta-filters Tue Feb 4 13:16:15 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h14LGF227630 for ietf-mta-filters-bks; Tue, 4 Feb 2003 13:16:15 -0800 (PST) Received: from smtp5.andrew.cmu.edu (SMTP5.andrew.cmu.edu [128.2.10.85]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h14LGEd27626 for ; Tue, 4 Feb 2003 13:16:14 -0800 (PST) Received: from penguin.andrew.cmu.edu (PENGUIN.andrew.cmu.edu [128.2.121.100]) by smtp5.andrew.cmu.edu (8.12.3.Beta2/8.12.3.Beta2) with ESMTP id h14LG9DX024535; Tue, 4 Feb 2003 16:16:09 -0500 Date: Tue, 4 Feb 2003 16:16:09 -0500 Message-Id: <200302042116.h14LG9DX024535@smtp5.andrew.cmu.edu> From: Lawrence Greenfield X-Mailer: BatIMail version 3.3 To: ietf-mta-filters@imc.org, Marc Mutz In-reply-to: <200302041510.27475@sendmail.mutz.com> Subject: Re: [managesieve] setactive "" semantics questions References: <200302041510.27475@sendmail.mutz.com> User-Agent: SEMI/1.14.3 (Ushinoya) FLIM/1.14.3 (=?ISO-8859-4?Q?Unebigory?= =?ISO-8859-4?Q?=F2mae?=) Emacs/21.2 (i686-pc-linux-gnu) MULE/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.3 - "Ushinoya") Content-Type: text/plain; charset=US-ASCII Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Date: Tue, 04 Feb 2003 15:10:26 +0100 From: Marc Mutz from draft-martin-managesieve-04: 2.8. SETACTIVE Command This command sets a script active. If the script name is the empty string (i.e. "") then any active script is disabled. If the script does not exist on the server then the server MUST reply with a NO response. What does that mean for setactive "" when no script is active? Should it fail or succeed? (The latter would be a PITA for client implementors, since I need to LISTSCRIPTS before any SETACTIVE ""). Our server repsonds with a "No" when there is no active script. I don't think a server that responds with an "Ok" would be that far out of line. And: Do I need to issue setactive "" between setactive "foo" setactive "bar" or will the second command implicitely set "foo" to inactive? You can send setactive "foo" setactive "bar" without any intervening commands. Larry From owner-ietf-mta-filters Sun Feb 23 22:57:45 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h1O6vjX19292 for ietf-mta-filters-bks; Sun, 23 Feb 2003 22:57:45 -0800 (PST) Received: from colossus.engr.paly.net (colossus.engr.paly.net [199.80.240.152]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h1O6vjd19288 for ; Sun, 23 Feb 2003 22:57:45 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by colossus.engr.paly.net (Postfix) with ESMTP id C189B9AA for ; Sun, 23 Feb 2003 22:55:13 -0800 (PST) Date: Sun, 23 Feb 2003 22:55:13 -0800 (PST) From: Aaron Stone X-X-Sender: aaron@colossus.paly.palo-alto.ca.us To: ietf-mta-filters@imc.org Subject: Working with the CMU Sieve code base Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Hi, I've been wrestling with the CMU Sieve code base for the past few weeks and months, cleaning it up and making it useable as a generic Sieve library without external dependencies. Many of the folks on this list are also in the source as principal authors of that code base... so this may be off-topic for the list, but is there interest in discussing the finer points of wrestling with the code here? Specifically: sieve_script_parse() takes a FILE argument. Many modern MDA's use databases, LDAP, and other such storage mechanisms for their user information, such that it would be much easier to present a buffer. Thanks, Aaron From owner-ietf-mta-filters Mon Feb 24 06:13:40 2003 Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h1OEDeS04842 for ietf-mta-filters-bks; Mon, 24 Feb 2003 06:13:40 -0800 (PST) Received: from lin1.andrew.cmu.edu (LIN1.andrew.cmu.edu [128.2.6.59]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h1OEDdd04838 for ; Mon, 24 Feb 2003 06:13:39 -0800 (PST) Received: from UNIX49.andrew.cmu.edu (UNIX49.andrew.cmu.edu [128.2.13.179]) (user=rjs3 mech=KERBEROS_V4 (0 bits)) by lin1.andrew.cmu.edu (8.12.7.Beta1/8.12.3.Beta2) with ESMTP id h1OEDO0V018873; Mon, 24 Feb 2003 09:13:24 -0500 Date: Mon, 24 Feb 2003 09:13:26 -0500 (EST) From: Rob Siemborski To: Aaron Stone cc: ietf-mta-filters@imc.org Subject: Re: Working with the CMU Sieve code base In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: I'd suggest the Cyrus Development list (cyrus-devel@lists.andrew.cmu.edu) for this thread. -Rob On Sun, 23 Feb 2003, Aaron Stone wrote: > > Hi, > > I've been wrestling with the CMU Sieve code base for the past few weeks > and months, cleaning it up and making it useable as a generic Sieve > library without external dependencies. > > Many of the folks on this list are also in the source as principal authors > of that code base... so this may be off-topic for the list, but is there > interest in discussing the finer points of wrestling with the code here? > > Specifically: sieve_script_parse() takes a FILE argument. Many modern > MDA's use databases, LDAP, and other such storage mechanisms for their > user information, such that it would be much easier to present a buffer. > > Thanks, > Aaron > > > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski | Andrew Systems Group * Research Systems Programmer PGP:0x5CE32FCC | Cyert Hall 207 * rjs3@andrew.cmu.edu * 412.268.7456 -----BEGIN GEEK CODE BLOCK---- Version: 3.12 GCS/IT/CM/PA d- s+: a-- C++++$ ULS++++$ P+++$ L+++(++++) E W+ N o? K- w O- M-- V-- PS+ PE++ Y+ PGP+ t+@ 5+++ R@ tv-@ b+ DI+++ G e h r- y? ------END GEEK CODE BLOCK----- Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h1OEDeS04842 for ietf-mta-filters-bks; Mon, 24 Feb 2003 06:13:40 -0800 (PST) Received: from lin1.andrew.cmu.edu (LIN1.andrew.cmu.edu [128.2.6.59]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h1OEDdd04838 for ; Mon, 24 Feb 2003 06:13:39 -0800 (PST) Received: from UNIX49.andrew.cmu.edu (UNIX49.andrew.cmu.edu [128.2.13.179]) (user=rjs3 mech=KERBEROS_V4 (0 bits)) by lin1.andrew.cmu.edu (8.12.7.Beta1/8.12.3.Beta2) with ESMTP id h1OEDO0V018873; Mon, 24 Feb 2003 09:13:24 -0500 Date: Mon, 24 Feb 2003 09:13:26 -0500 (EST) From: Rob Siemborski To: Aaron Stone cc: ietf-mta-filters@imc.org Subject: Re: Working with the CMU Sieve code base In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: I'd suggest the Cyrus Development list (cyrus-devel@lists.andrew.cmu.edu) for this thread. -Rob On Sun, 23 Feb 2003, Aaron Stone wrote: > > Hi, > > I've been wrestling with the CMU Sieve code base for the past few weeks > and months, cleaning it up and making it useable as a generic Sieve > library without external dependencies. > > Many of the folks on this list are also in the source as principal authors > of that code base... so this may be off-topic for the list, but is there > interest in discussing the finer points of wrestling with the code here? > > Specifically: sieve_script_parse() takes a FILE argument. Many modern > MDA's use databases, LDAP, and other such storage mechanisms for their > user information, such that it would be much easier to present a buffer. > > Thanks, > Aaron > > > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski | Andrew Systems Group * Research Systems Programmer PGP:0x5CE32FCC | Cyert Hall 207 * rjs3@andrew.cmu.edu * 412.268.7456 -----BEGIN GEEK CODE BLOCK---- Version: 3.12 GCS/IT/CM/PA d- s+: a-- C++++$ ULS++++$ P+++$ L+++(++++) E W+ N o? K- w O- M-- V-- PS+ PE++ Y+ PGP+ t+@ 5+++ R@ tv-@ b+ DI+++ G e h r- y? ------END GEEK CODE BLOCK----- Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h1O6vjX19292 for ietf-mta-filters-bks; Sun, 23 Feb 2003 22:57:45 -0800 (PST) Received: from colossus.engr.paly.net (colossus.engr.paly.net [199.80.240.152]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h1O6vjd19288 for ; Sun, 23 Feb 2003 22:57:45 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by colossus.engr.paly.net (Postfix) with ESMTP id C189B9AA for ; Sun, 23 Feb 2003 22:55:13 -0800 (PST) Date: Sun, 23 Feb 2003 22:55:13 -0800 (PST) From: Aaron Stone X-X-Sender: aaron@colossus.paly.palo-alto.ca.us To: ietf-mta-filters@imc.org Subject: Working with the CMU Sieve code base Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Hi, I've been wrestling with the CMU Sieve code base for the past few weeks and months, cleaning it up and making it useable as a generic Sieve library without external dependencies. Many of the folks on this list are also in the source as principal authors of that code base... so this may be off-topic for the list, but is there interest in discussing the finer points of wrestling with the code here? Specifically: sieve_script_parse() takes a FILE argument. Many modern MDA's use databases, LDAP, and other such storage mechanisms for their user information, such that it would be much easier to present a buffer. Thanks, Aaron Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h14LGF227630 for ietf-mta-filters-bks; Tue, 4 Feb 2003 13:16:15 -0800 (PST) Received: from smtp5.andrew.cmu.edu (SMTP5.andrew.cmu.edu [128.2.10.85]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h14LGEd27626 for ; Tue, 4 Feb 2003 13:16:14 -0800 (PST) Received: from penguin.andrew.cmu.edu (PENGUIN.andrew.cmu.edu [128.2.121.100]) by smtp5.andrew.cmu.edu (8.12.3.Beta2/8.12.3.Beta2) with ESMTP id h14LG9DX024535; Tue, 4 Feb 2003 16:16:09 -0500 Date: Tue, 4 Feb 2003 16:16:09 -0500 Message-Id: <200302042116.h14LG9DX024535@smtp5.andrew.cmu.edu> From: Lawrence Greenfield X-Mailer: BatIMail version 3.3 To: ietf-mta-filters@imc.org, Marc Mutz In-reply-to: <200302041510.27475@sendmail.mutz.com> Subject: Re: [managesieve] setactive "" semantics questions References: <200302041510.27475@sendmail.mutz.com> User-Agent: SEMI/1.14.3 (Ushinoya) FLIM/1.14.3 (=?ISO-8859-4?Q?Unebigory?= =?ISO-8859-4?Q?=F2mae?=) Emacs/21.2 (i686-pc-linux-gnu) MULE/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.3 - "Ushinoya") Content-Type: text/plain; charset=US-ASCII Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Date: Tue, 04 Feb 2003 15:10:26 +0100 From: Marc Mutz from draft-martin-managesieve-04: 2.8. SETACTIVE Command This command sets a script active. If the script name is the empty string (i.e. "") then any active script is disabled. If the script does not exist on the server then the server MUST reply with a NO response. What does that mean for setactive "" when no script is active? Should it fail or succeed? (The latter would be a PITA for client implementors, since I need to LISTSCRIPTS before any SETACTIVE ""). Our server repsonds with a "No" when there is no active script. I don't think a server that responds with an "Ok" would be that far out of line. And: Do I need to issue setactive "" between setactive "foo" setactive "bar" or will the second command implicitely set "foo" to inactive? You can send setactive "foo" setactive "bar" without any intervening commands. Larry Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h14EOoj11745 for ietf-mta-filters-bks; Tue, 4 Feb 2003 06:24:50 -0800 (PST) Received: from mail.uni-bielefeld.de (IDENT:72@mail2.uni-bielefeld.de [129.70.4.90]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h14EOmd11738 for ; Tue, 4 Feb 2003 06:24:48 -0800 (PST) Received: from dirichlet.Physik.Uni-Bielefeld.DE (dirichlet.Physik.Uni-Bielefeld.DE [129.70.125.234]) by mail.uni-bielefeld.de (Sun Internet Mail Server sims.4.0.2000.10.12.16.25.p8) with ESMTP id <0H9S009AQG153V@mail.uni-bielefeld.de> for ietf-mta-filters@imc.org; Tue, 4 Feb 2003 15:24:41 +0100 (MET) Date: Tue, 04 Feb 2003 15:10:26 +0100 From: Marc Mutz Subject: [managesieve] setactive "" semantics questions To: ietf-mta-filters@imc.org Message-id: <200302041510.27475@sendmail.mutz.com> Organization: KDE MIME-version: 1.0 Content-type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_Tn8P+smFRSRbI15"; charset="us-ascii" Content-transfer-encoding: 7bit User-Agent: KMail/1.5.9 X-PGP-Key: 0xBDBFE838 Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --Boundary-02=_Tn8P+smFRSRbI15 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Content-Description: signed data Content-Disposition: inline Hi! from draft-martin-managesieve-04: 2.8. SETACTIVE Command This command sets a script active. If the script name is the empty string (i.e. "") then any active script is disabled. If the script does not exist on the server then the server MUST reply with a NO response. What does that mean for setactive "" when no script is active? Should it fail or succeed? (The latter would=20 be a PITA for client implementors, since I need to LISTSCRIPTS before=20 any SETACTIVE ""). And: Do I need to issue setactive "" between setactive "foo" setactive "bar" or will the second command implicitely set "foo" to inactive? Marc =2D-=20 They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin --Boundary-02=_Tn8P+smFRSRbI15 Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQA+P8nT3oWD+L2/6DgRAp+fAJ9RybWLfrJKSfLiP0DVj58GbkDuBACfbkzB t6r2yoDv7/bdgK1ljBHn08U= =O9kN -----END PGP SIGNATURE----- --Boundary-02=_Tn8P+smFRSRbI15-- Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h140CdP17066 for ietf-mta-filters-bks; Mon, 3 Feb 2003 16:12:39 -0800 (PST) Received: from mail.uni-bielefeld.de (IDENT:72@mail2.uni-bielefeld.de [129.70.4.90]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h140CWd17062 for ; Mon, 3 Feb 2003 16:12:33 -0800 (PST) Received: from 192.168.0.3 (ppp36-76.hrz.uni-bielefeld.de [129.70.36.76]) by mail.uni-bielefeld.de (Sun Internet Mail Server sims.4.0.2000.10.12.16.25.p8) with ESMTP id <0H9R00MAKCKI1F@mail.uni-bielefeld.de> for ietf-mta-filters@imc.org; Tue, 4 Feb 2003 01:12:33 +0100 (MET) Date: Tue, 04 Feb 2003 00:53:51 +0100 From: Marc Mutz Subject: Re: extensions and sieve In-reply-to: <20030203231330.GB1511@jutta.sendmail.com> To: ietf-mta-filters@imc.org Message-id: <200302040053.51693@sendmail.mutz.com> Organization: KDE MIME-version: 1.0 Content-type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_PEwP+fRpHixpUT3"; charset="iso-8859-1" Content-transfer-encoding: 7bit User-Agent: KMail/1.5.9 X-PGP-Key: 0xBDBFE838 References: <15212264.1044292125@PLATO.cyrusoft.com> <20030203231330.GB1511@jutta.sendmail.com> Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --Boundary-02=_PEwP+fRpHixpUT3 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Description: signed data Content-Disposition: inline On Tuesday 04 February 2003 00:13, Jutta Degener wrote: > But maybe this is overkill. It isn't, but this is: > - RFC 2047 prohibits RFC 2047-encoding of filenames. > (They're not the right kind of token.) > > In reality, many clients do RFC 2047-encode and -decode names, > and I think sieve code matching against file names in order > to prevent use of certain extensions needs to, ironically, > RFC 2047-decode the wrong tokens in spite of what the RFC itself > says. They should decode rfc2231, of course, but leave rfc2047 alone in=20 parameters. The only client I am aware of that is so broken to produce=20 rfc2047 in parameter values is - guess what - Outlook (I think mutt had=20 this bug in one or two minor revisions, too, but I don't know, so I=20 won't claim it). As a general note, this mimeheader searching is of course failing for=20 encrypted content, so if you try to filter out .vbs (which, I suppose,=20 are VisualBasic scripts), you're better off hooking up a custom=20 solution (read: ADKs, bah!) into your Sieve engine's spamtest/virustest=20 framework. Marc =2D-=20 History teaches that grave threats to liberty often come in times of urgency, when constitutional rights seem too extravagant to endure. -- Justice Thurgood Marshall, 1989 --Boundary-02=_PEwP+fRpHixpUT3 Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQA+PwEP3oWD+L2/6DgRAoe4AKCoVoP1Uk+XRBIKte+C7rBMhNAHeACgx4+y nDzORal4ZNmUaC4Q1L7IinI= =JGJA -----END PGP SIGNATURE----- --Boundary-02=_PEwP+fRpHixpUT3-- Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13NEUf15602 for ietf-mta-filters-bks; Mon, 3 Feb 2003 15:14:30 -0800 (PST) Received: from spork.sendmail.com (spork.Sendmail.COM [209.246.26.39]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13NEPd15597 for ; Mon, 3 Feb 2003 15:14:29 -0800 (PST) Received: from foon.sendmail.com (smtp.sendmail.com [209.246.26.40]) by spork.sendmail.com (Switch-2.2.5/Switch-2.2.4) with ESMTP id h13NE7w03706 (using TLSv1/SSLv3 with cipher EDH-RSA-DES-CBC3-SHA (168 bits) verified OK); Mon, 3 Feb 2003 15:14:08 -0800 (PST) Received: from jutta.sendmail.com (shell.Sendmail.COM [209.246.26.38]) by foon.sendmail.com (Switch-3.0.2/Switch-3.0.0) with ESMTP id h13NE6Rn032234; Mon, 3 Feb 2003 15:14:07 -0800 Received: by jutta.sendmail.com (Postfix, from userid 500) id 9FF60179C4; Mon, 3 Feb 2003 15:13:30 -0800 (PST) Date: Mon, 3 Feb 2003 15:13:30 -0800 From: Jutta Degener To: ietf-mta-filters@imc.org Cc: Kristin.Hubner@sun.com Subject: Re: extensions and sieve Message-ID: <20030203231330.GB1511@jutta.sendmail.com> References: <01KS04Q15U8K8X1F84@orth.west.sun.com> <15212264.1044292125@PLATO.cyrusoft.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <15212264.1044292125@PLATO.cyrusoft.com> User-Agent: Mutt/1.3.24i X-Filtered: Sendmail MIME Filter v2.3.1 foon.sendmail.com h13NE6Rn032234 Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Seems a lot of people have asked for this. So, here's a bit of wording to play with. Two issues I can think of: - I really don't like applying regexes to something with a comment and quote syntax. Therefore, I'd like a :param parameter that can be used to select a Content-Disposition or Content-Type parameter (so you'd check for :param "filename" in the example) rather than trying to just match them with :contains or worse. (The grammar describing what :param means can probably be done better.) But maybe this is overkill. - RFC 2047 prohibits RFC 2047-encoding of filenames. (They're not the right kind of token.) In reality, many clients do RFC 2047-encode and -decode names, and I think sieve code matching against file names in order to prevent use of certain extensions needs to, ironically, RFC 2047-decode the wrong tokens in spite of what the RFC itself says. I'm not sure about the right wording there. Here's a hasty first draft: Test mimeheader Syntax: mimeheader [:param ] [COMPARATOR] [MATCH-TYPE] The "mimeheader" test evaluates to true if any of the values of the named MIME headers match any of the keys. The type of match is specified by the optional [MATCH-TYPE] argument, which defaults to ":is", as specified in section 2.6 of [SIEVE]. Like the "header" test, this test returns true if any combination of the string-list and key-list arguments match. Also like "header", a MIME header listed in the header-names argument contains the empty string key if and only if it exists. Unlike the "header" test, the headers matching the "mimeheader" test can occur either in the outermost RFC2822 header or in any of the contained MIME parts. (They must occur in the header section of a MIME part; the matching algorithm MUST disregard the text contained in MIME bodies.) If the optional :param keyword is present, all matching headers are interpreted as if they had the syntax *(token / ) *(; name=value) similar of the Content-Type and Content-Disposition header, and the value used for the sake of comparison is that of the parameter whose name case-insensitively matches any of the specified names. Jutta Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13M8D214121 for ietf-mta-filters-bks; Mon, 3 Feb 2003 14:08:13 -0800 (PST) Received: from darius.cyrusoft.com (darius.cyrusoft.com [63.163.82.2]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13M8Bd14117 for ; Mon, 3 Feb 2003 14:08:11 -0800 (PST) Received: from PLATO.cyrusoft.com (localhost [127.0.0.1]) by darius.cyrusoft.com (8.9.3/8.9.3) with ESMTP id RAA24104; Mon, 3 Feb 2003 17:04:55 -0500 (EST) Date: Mon, 03 Feb 2003 17:08:45 -0500 From: Cyrus Daboo To: Kristin.Hubner@sun.com cc: ietf-mta-filters@imc.org Subject: Re: extensions and sieve Message-ID: <15212264.1044292125@PLATO.cyrusoft.com> In-Reply-To: <01KS04Q15U8K8X1F84@orth.west.sun.com> References: <01KS04Q15U8K8X1F84@orth.west.sun.com> X-Mailer: Mulberry/3.0.0 (Win32) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Hi Kristin.Hubner@sun.com, --On Monday, February 03, 2003 1:20 PM -0800 Kristin.Hubner@sun.com wrote: | In the meantime, note that for a message that is in MIME format, you can | hope that perhaps the filename will show up in a MIME header line. For | instance, filenames are sometimes in a NAME parameter on a Content-type: | header line, or in a FILENAME parameter on the Content-disposition: | header line, or occasionally filenames will even get put on the | Content-description: header line. So you could try doing something like: | | if header :contains | ["Content-type", "Content-disposition", "Content-description"] ".vbs" { | ...some action... } | | but of course note that that's only going to apply in cases where incoming | messages are in MIME format, and happen to have the filename explicitly | advertised on one of the listed MIME header lines. So depending upon what | sorts of incoming messages you're dealing with, this may or may not be | useful. That won't work in general. The 'header' test is done only over the top-level rfc2822 headers and not on any MIME headers embedded in the message when it is a multipart. Thus any multiparts will not be caught by this and I think that will be the majority of cases. -- Cyrus Daboo Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13LjhK13267 for ietf-mta-filters-bks; Mon, 3 Feb 2003 13:45:43 -0800 (PST) Received: from kathmandu.sun.com (kathmandu.sun.com [192.18.98.36]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13LjZd13261 for ; Mon, 3 Feb 2003 13:45:35 -0800 (PST) Received: from elephant.West.Sun.COM ([129.153.12.10]) by kathmandu.sun.com (8.9.3+Sun/8.9.3) with ESMTP id OAA01520 for ; Mon, 3 Feb 2003 14:45:37 -0700 (MST) From: Kristin.Hubner@sun.com Received: from orth.west.sun.com (SYSTEM@orth [129.153.12.42]) by elephant.West.Sun.COM (8.12.2+Sun/8.12.2/ENSMAIL,v2.2) with ESMTP id h13LjBbH015696 for ; Mon, 3 Feb 2003 13:45:36 -0800 (PST) Received: from orth.west.sun.com by orth.west.sun.com (PMDF V6.0-24 #30494) id <01KS03SI7CDC8X1F84@orth.west.sun.com> for ietf-mta-filters@imc.org; Mon, 03 Feb 2003 13:45:10 -0800 (PST) Date: Mon, 03 Feb 2003 13:20:31 -0800 (PST) Subject: Re: extensions and sieve In-reply-to: "Your message dated Mon, 03 Feb 2003 20:57:12 +0000" <003a01c2cbc6$d3a9f810$ce0ec350@nigelhome> To: Paulo Sousa Cc: Nigel Swinson , ietf-mta-filters@imc.org Message-id: <01KS04Q15U8K8X1F84@orth.west.sun.com> MIME-version: 1.0 Content-type: TEXT/PLAIN; charset=iso-8859-1 References: Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: In addition to what Nigel Swinson wrote: > > Anyone could help me? I need filter mails by extensions (.exe .vbs ....). > > How i can do a rule to this? > The Sieve spec doesn't natively support any kind of test on the content of > the message, only the headers, envelope and size of the message. Sieve is > currently not MIME aware at all. > However some implementation have some kind of X_body test that allows you to > search against the body of the message, but it's all a bit of kludge. It's > only really worthwhile if it's available in conjunction with the regex > extension, and even then it becomes extremely CPU intensive, and a problem > for the server. > The better solution is to wait for us to knock together some kind of mime > aware syntax that allows us to say "emails that contain attachments of type > X"... In the meantime, note that for a message that is in MIME format, you can hope that perhaps the filename will show up in a MIME header line. For instance, filenames are sometimes in a NAME parameter on a Content-type: header line, or in a FILENAME parameter on the Content-disposition: header line, or occasionally filenames will even get put on the Content-description: header line. So you could try doing something like: if header :contains ["Content-type", "Content-disposition", "Content-description"] ".vbs" { ...some action... } but of course note that that's only going to apply in cases where incoming messages are in MIME format, and happen to have the filename explicitly advertised on one of the listed MIME header lines. So depending upon what sorts of incoming messages you're dealing with, this may or may not be useful. Regards, Kristin > Doing this with MailSite for example, involves following the advice found in > the following KB articles: > http://www.rockliffe.com/support/docs/html/1/00/10039.asp > http://www.rockliffe.com/support/docs/html/1/00/10078.asp > The KB articles describe how to enter the filters into the gui, but if you > click the "advanced" button then you get to see the Sieve it produces in all > it's glory. > BTW, this list is NOT designed to answer this kind of query... it's for > discussion and creation of new Sieve standards/specs. Advice on this kind > of thing should be solicited from your mail server provider. > Cheers > Nigel Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13KuR011719 for ietf-mta-filters-bks; Mon, 3 Feb 2003 12:56:27 -0800 (PST) Received: from starship.enterprise.ucs.ed.ac.uk (starship.enterprise.ucs.ed.ac.uk [129.215.40.70]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13KuNd11712 for ; Mon, 3 Feb 2003 12:56:23 -0800 (PST) Received: from nigelhome (pc-80-195-14-206-ed.blueyonder.co.uk [80.195.14.206]) by enterprise.ucs.ed.ac.uk (Rockliffe SMTPRA 5.2.3) with ESMTP id ; Mon, 3 Feb 2003 20:56:22 +0000 Message-ID: <003a01c2cbc6$d3a9f810$ce0ec350@nigelhome> From: "Nigel Swinson" To: "Paulo Sousa" Cc: References: Subject: Re: extensions and sieve Date: Mon, 3 Feb 2003 20:57:12 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2720.3000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: > Anyone could help me? I need filter mails by extensions (.exe .vbs ....). > How i can do a rule to this? The Sieve spec doesn't natively support any kind of test on the content of the message, only the headers, envelope and size of the message. Sieve is currently not MIME aware at all. However some implementation have some kind of X_body test that allows you to search against the body of the message, but it's all a bit of kludge. It's only really worthwhile if it's available in conjunction with the regex extension, and even then it becomes extremely CPU intensive, and a problem for the server. The better solution is to wait for us to knock together some kind of mime aware syntax that allows us to say "emails that contain attachments of type X"... Doing this with MailSite for example, involves following the advice found in the following KB articles: http://www.rockliffe.com/support/docs/html/1/00/10039.asp http://www.rockliffe.com/support/docs/html/1/00/10078.asp The KB articles describe how to enter the filters into the gui, but if you click the "advanced" button then you get to see the Sieve it produces in all it's glory. BTW, this list is NOT designed to answer this kind of query... it's for discussion and creation of new Sieve standards/specs. Advice on this kind of thing should be solicited from your mail server provider. Cheers Nigel Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id h13EVqU24967 for ietf-mta-filters-bks; Mon, 3 Feb 2003 06:31:52 -0800 (PST) Received: from shadow.alternex.com.br (shadow.alternex.com.br [200.219.63.20]) by above.proper.com (8.11.6/8.11.3) with ESMTP id h13EVpd24963 for ; Mon, 3 Feb 2003 06:31:51 -0800 (PST) Received: from legolas.alternex.com.br (legolas.alternex.com.br [200.219.25.45]) by shadow.alternex.com.br (Postfix) with ESMTP id D590B226DA for ; Mon, 3 Feb 2003 12:31:01 -0200 (BRST) Date: Mon, 3 Feb 2003 12:31:51 -0200 (BRST) From: Paulo Sousa To: ietf-mta-filters@imc.org Subject: extensions and sieve Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-mta-filters@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Hi Anyone could help me? I need filter mails by extensions (.exe .vbs ....). How i can do a rule to this? Thanks Paulo Sousa