Quarantining "mailbombs" instead putting them on HOLD

[Ralf Hildebrandt]

Hi!

When a mail is unscannable due to exceeding any of:

$MAXLEVELS = 30;
$MAXFILES = 6000;
$MAX_EXPANSION_QUOTA = 200*1024*1024;  # bytes  (default undef, not enforced)

it is (as far as I know) being marked with an additional header:
X-Amavis-Hold: Exceeded storage quota

I can then use header_checks in Postfix to put this mail on HOLD:
/^X-Amavis-Hold:/ HOLD
# X-Amavis-Hold: Exceeded storage quota

This works perfectly. But is there a way of putting the mail into the
(virus)quarantine instead?

-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ralf.hildebrandt at charite.de        Campus Benjamin Franklin
http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155