Other filter for SIRCAM

Hi All

I am using the followin filter and work fine, this rc stop the virus and 
send warning message to sender.
PATH=/usr/local/bin:/usr/bin:/bin
MAILDIR=$HOME/mail
LOGFILE=$MAILDIR/log

SUBJECT=`formail -xSubject: \
       | sed -e 's/[;\`\\]/ /g' \
       | expand | sed -e 's/^[ ]*//g' -e 's/[ ]*$//g'`

FROM=`formail -rt -xTo: \
       | sed -e 's/[;\`\\]/ /g' \
       | expand | sed -e 's/^[ ]*//g' -e 's/[ ]*$//g'`

:0 B:
* $ ^Content-Type: application/mixed; name=.*"$SUBJECT".*
{
       :0 h:
       * ^X-Mailer: Microsoft
       * ^Content-Type: multipart/mixed;
       | (formail -r -I "Subject: \"SirCam\" Worm Warning"; \
               echo "Su equipo tiene el virus \"SirCam\" Email Worm.  "; \
               echo "Como resultado, Usted me envio un archivo llamado 
\"$SUBJECT\" que contiene el virus. "; \
               echo; \
               echo "Favor Visitar 
http://www.symantec.com/avcenter/venc/data/w32(_dot_)sircam(_dot_)worm(_at_)mm(_dot_)html "; \
               echo "Aqui encontrara las instrucciones de como remover el 
virus."; \
               echo; \
               echo "Mas informacion podra encontrarla en: "; \
               echo 
"http://www.wired.com/news/technology/0,1282,45427,00.html and "; \
               echo 
"http://www.zdnet.com/zdnn/stories/news/0,4586,2792260,00.html?chkpt=zdnnp1tp02 
"; \
               ) | /usr/lib/sendmail -t

       :0:
       /dev/null
}

Regards


_________________________________________________________________
Descargue GRATUITAMENTE MSN Explorer en http://explorer.msn.es/intl.asp

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail