procmail
[Top] [All Lists]

Re: IL0VEY0U has mutated

2000-05-08 05:23:17
On 5 May 2000, Lars Hecking <lhecking(_at_)nmrc(_dot_)ucc(_dot_)ie> wrote:
Jerry Preeper writes:
If I can ask real quick, will this recipe in an rc file catch
anything with a .vbs file?

:0 f
* ^Content-.*: .*\.vbs
|formail -A "X-Spam-Reject: rc.viruses - vbs attached"

 Looks ok,

    You need to grep the _body_ for that pattern.  The "Content-Type"
in the headers of a multipart message is normally "multipart/mixed".
As far as Procmail is concerned, the MIME headers for the individual
attachments are in the body.

 although I would just use

 * ^Content.*\.vbs

 I am not sure whether this will work if the Content* header is spread
 over several lines.

    Definitely not if you grep the body.

    Regards,

    Liviu Daia

-- 
Dr. Liviu Daia               e-mail:   Liviu(_dot_)Daia(_at_)imar(_dot_)ro
Institute of Mathematics     web page: http://www.imar.ro/~daia
of the Romanian Academy      PGP key:  http://www.imar.ro/~daia/daia.asc

<Prev in Thread] Current Thread [Next in Thread>