fwiw... I just got a slew that were just over 28k... filenames like
humor.mp3.scr and info.doc.scr and such... there might have been some even
smaller, I hit delete too fast...
I have to admit to being a little slow here, but do those two first
conditions specify the range of bytes in the message? Ive been
getting them in the 530 line range, so I imagine it could fall in that
range. What's the reasoning for checking the range? Other than we
can email back and forth about it, I mean.
Conservative coding in an attempt to reduce false positives. Has
anyone seen one outside that size range?
Not so far.
-r-------- 1 amavis amavis 40670 Nov 25 22:19
virus-20011125-221913-17991
-r-------- 1 amavis amavis 40733 Nov 26 10:55
virus-20011126-105543-15549
-r-------- 1 amavis amavis 40722 Nov 26 10:56
virus-20011126-105636-15649
-r-------- 1 amavis amavis 40535 Nov 26 18:28
virus-20011126-182820-20471
-r-------- 1 amavis amavis 41207 Nov 26 20:41
virus-20011126-204130-26245
-r-------- 1 amavis amavis 42102 Nov 26 21:25
virus-20011126-212521-27835
-r-------- 1 amavis amavis 40689 Nov 26 22:05
virus-20011126-220555-29363
-r-------- 1 amavis amavis 41245 Nov 27 01:18
virus-20011127-011817-6165
-r-------- 1 amavis amavis 40659 Nov 27 10:16
virus-20011127-101633-26095
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail