procmail
[Top] [All Lists]

Re: IL0VEY0U has mutated

2000-05-08 04:56:36
Lars Hecking wrote:

Jerry Preeper writes:
If I can ask real quick, will this recipe in an rc file catch anything with
a .vbs file?

:0 f
* ^Content-.*: .*\.vbs
|formail -A "X-Spam-Reject: rc.viruses - vbs attached"

 Looks ok, although I would just use

 * ^Content.*\.vbs

 I am not sure whether this will work if the Content* header
 is spread over several lines.

We don't use X-Spam-Reject.

How does this look? Any problems?

:0 
* Content.*\.vbs
{
        SUBJECT=`/opt/bin/formail -xSubject:`
        :0 f
        | /opt/bin/formail -I "Subject: $SUBJECT (WARNING!
Possible Virus)"
}

--
Roberto Ullfig : rullfig(_at_)uchicago(_dot_)edu
Systems Administrator
Networking Services and Information Technologies
University of Chicago

<Prev in Thread] Current Thread [Next in Thread>