On 24 Jul, i l i a n a f i l b y wrote:
| Hi
|
| Could someone please look over this filter recipe which I cobbled
| together? I'm not good at this but I need to put something in place,
| and I'd like to confirm that this recipe won't break anything. Much.
|
| Thanks.
|
| ############################################################
| # SirCam protection
| :0 HB
| * ^Content-Disposition: attachment;
| * filename=".*\.(exe|com)"
| {
| LOG='REGJECT - SirCam'
|
| :0
| /var/tmp/SirCam-quarantine
| }
| ############################################################
|
| P.S. Would it be less prone for trouble if I somehow added something
| like this in addition to the recipe above:
|
| ############################################################
| :0 c
| * B ?? Hi\! How are you\?
| * B ?? I send you this file in order to have your advice
| * B ?? See you later. Thanks
| ############################################################
|
| If so, I'm not sure how to add the second part to the first properly.
|
To answer your question, just add the three conditions to the two you
already have. The "B ??" part can be removed from each of them since
you have a "B" flag on the whole recipe. That said, this isn't going
to get all of them.
There is more than this one form floating around, though this is by far
the most prevalent. There's about a half a dozen messages under two
different Subject threads that cover it. Rather than going over it
again, they can be found at:
http://www.xray.mpe.mpg.de/mailing-lists/procmail/2001-07/msg00319.html
http://www.xray.mpe.mpg.de/mailing-lists/procmail/2001-07/msg00356.html
One additional note besides what I've previously said: The recipes I
posted to the list don't check for a mime attachment. I think it's
unnecessary first of all, not that it hurts anything. But for my
purposes I specifically don't care if the attachment is there. I first
saw this crap on a mailing list where they were delivered to me without
the attachments (the list uses demime). Even though there was no
payload, I didn't want to see them. So I don't.
--
/"\
Don Hammond \ / ASCII Ribbon Campaign
Raleigh, NC US X Against HTML Mail,
/ \ and News Too
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail