procmail
[Top] [All Lists]

Re: Outlook Exploit Filter?

2000-07-22 03:17:21
You want to drop any message with more than fifty characters in the Date:
header?  OK ...

 :0
 * ^\/Date:.*
 { DATEHEADER=$MATCH }

 :0
 * 1^1 DATEHEADER ?? .
 * -50^0
 /dev/null


Is it possible for there to be more than one Date: header in a message
(even if it's not legal)?   If so, and the second one has the overflow,
the above recipe would miss it.

Why? Because it delivers.

--Ruud






_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>