On Tue, 27 Nov 2001, PR wrote:
fwiw... I just got a slew that were just over 28k... filenames like
humor.mp3.scr and info.doc.scr and such...
I've also received some where the type= and boundary= parameters of
the multipart/related line were reversed, so that checking for the
trailing semicolon after one or the other caused the filter to miss.
Here's what I'm using right now:
:0
* > 20000
* < 50000
* ^Subject:.*Re:
* ^Content-Type:.*multipart/related;.*"?multipart/alternative"?
* ^Content-Type:.*multipart/related;.*boundary="====_ABC
* B ?? ^Content-Type: audio/x-wav;
* B ?? ^Content-ID: <EA4DMGBP9p>
{ VIRUS="BadTrans worm" }
(I have a later recipe that checks the contents of the VIRUS variable.)
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail