procmail
[Top] [All Lists]

Re: Procmail filer for "I LOVE YOU" worm

2000-05-04 11:42:59
[Posting to procmail list in case more people have the same problem.]

Maybe I'm missing something here but I thought for global filtering all I
had to do is put this in my /etc/procmailrc file. However the messages still
go through.

What am I doing wrong?

Unless procmail is your default MDA (mail delivering agent, usually
/bin/mail with default sendmail setup) only user that explicitly calls
procmail from .forward will have the ILOVEYOU emails filtered. If procmail
is not the default MDA you must do something like this at the bottom of
your sendmail.mc file (used to make sendmail.cf file).

LOCAL_RULESETS
HSubject: $>Check_Subject
D{MPat}ILOVEYOU
D{MMsg}Warning: This message may contain a virus, and is therefore rejected

SCheck_Subject
R${MPat} $*             $#discard $: discard
RRe: ${MPat} $*         $#discard $: discard

But this is a much more complicated solution.

--
Geir Johannessen     #  Student address:   #  joge(_at_)stud(_dot_)ntnu(_dot_)no
Hofftunet 13         #  Berg Studby A-103  #  http://2180058000/~joge/
N-0379 Oslo, NORWAY  #  N-7051 Trondheim   #  Phone: +47-90557466
"WindowError 015: Unable to exit windows.  Try the door."