
Find Attachment Filter, PRO version, v1.2

This filter adds specific headers to messages that contains attachments.

The filter finds attachments in the message, then instructs CGPro to add one
header for each type (extension) of attachment found.

For an EXE attachment in the message, a "X-AttachExt: exe" header woud be
added. This kind of header can then be filtered using CGP rules, to reject
of take specific actions on particular attachments.

Follow the instructions in the INSTALL file to install the filter and proceed
to the initial configuration.

CGP rules can then be configured.

To reject, for instance, *.exe, *.scr, *.com, the rule would be

Header Field in X-AttachExt: exe,X-AttachExt: scr,X-AttachExt: com
Discard / Reject With: [...]

The Header Field condition is NOT case-sensitive.

When the filter finds an attached file that has no extension, the header is
"X-AttachExt: ..."

ZIP FILES

The filter performs high-level analysis of attached ZIP files. It does NOT
extract compressed data. Only the central directory structure is analyzed,
and second-level zip files (zip in a zip) are NOT analyzed.

In all cases, the normal header is added:
"X-AttachExt: zip"

If the zip file is encrypted, a special header is added:
"X-AttachExt: zip.pw"

The filter will also report each extension found within the zip file itself as
"X-AttachExt: zip/ext"
where "ext" is the extension of the file (zip/exe, zip/txt, ...).

The filter can also be used to report messages without a body. When a message
pass through the filter and contains headers but no body at all, the header
"X-EmptyBody: YES" is added to the message.

If you have questions or inquiries regarding this filter or its installation,
please contact info@niversoft.com.
