Re: Ask for Client Certificates

2014-02-01 Thread Bastian Blank
On Wed, Jan 29, 2014 at 11:39:09AM +0100, Patrik Båt wrote:
> I know this is a client problem, but have anyone seen any impact for
> enabling this? Is it a big problem now-days?

I tried it once.  The client will ask it's user for a usable
certificate.

> And can you somehow explicitly set this to only specified clients to
> request client certificate?

How would you differentiate them?  I opted for using a different port.

Bastian

-- 
Without followers, evil cannot spread.
-- Spock, "And The Children Shall Lead", stardate 5029.5


Re: Blocking zip attachments if filesize smaller than xx kbytes

2014-02-01 Thread Jose-Marcio Martins da Cruz

On 02/01/2014 05:09 AM, Noel Jones wrote:

On 1/31/2014 5:38 PM, Thijssen wrote:

Has someone already done this using header_checks?
If so, please post the example you use.
I'm getting fed up with those sneaky bastards trying to convince my
parents to click on their attachments. But still need to allow
incoming .zip attachments if they're larger than, say, 80 kbytes.

Who in their right mind would want to zip a file with such small size anyway?

/name=[^>]*\.(exe|zip)/ REJECT

TIA


You'll need to use a content filter or milter of some type to do a
two-factor check.


j-chkmail does this.


--



RE: Blocking zip attachments if filesize smaller than xx kbytes

2014-02-01 Thread Dudi Goldenberg
>> You'll need to use a content filter or milter of some type to do a
>> two-factor check.
>
>j-chkmail does this.

+1

j-chkmail does wonders for me.

D.