Hello all.
I have constructed the following procmail recipe to handle BadTransII virus:
:0 B
* ^Content-Type: audio/x-wav;
* .*name=".*\..*\.(pif|scr)"
{
:0 c
/var/spool/mail/VIRUS-BadTransII
:0
* !^FROM_MAILER
| (formail -r -I"Subject: Virus Alert";\
echo "We have received your E-Mail message containing I-Worm";\
echo "BadTransII virus as an attachement. Message has been";\
echo "blocked. Please contact PostMaster(_at_)geo(_dot_)net(_dot_)ge
for more";\
echo "information.") | $SENDMAIL -t -f
"PostMaster(_at_)geo(_dot_)net(_dot_)ge"
:0
/dev/null
}
when I send test mail to my account with the following body:
Content-Type: audio/x-wav;
name="DOC.DOC.pif"
it works fine and I get back my warning message. but when it handles
infected message, I get the error in my logs. I cant understand what is the
difference and why I get this error. Maybe someone can help me with it. here
are logs:
procmail: [26438] Fri Nov 30 23:24:20 2001
procmail: Assigning "LASTFOLDER=/var/spool/mail/VIRUS-BadTransII"
procmail: Opening "/var/spool/mail/VIRUS-BadTransII"
procmail: Acquiring kernel-lock
procmail: Match on !
"(^(((Resent-)?(From|Sender)|X-Envelope-From):|>?From )([^>
procmail: Executing " (formail -r -I"Subject: Virus Alert";\
echo "We have received your E-Mail message containing I-Worm";\
echo "BadTransII virus as an attachement. Message has been";\
echo "blocked. Please contact PostMaster(_at_)geo(_dot_)net(_dot_)ge
for more";\
echo "information.") | $SENDMAIL -t -f
"PostMaster(_at_)geo(_dot_)net(_dot_)ge""
procmail: Error while writing to " (formail -r -I"Subject: Virus Alert";\
echo "We have received your E-Mail message containing I-Worm";\
echo "BadTransII virus as an attachement. Message has been";\
echo "blocked. Please contact PostMaster(_at_)geo(_dot_)net(_dot_)ge
for more";\
echo "information.") | $SENDMAIL -t -f
"PostMaster(_at_)geo(_dot_)net(_dot_)ge""
procmail: Assigning "LASTFOLDER= (formail -r -I"Subject: Virus Alert";\
echo "We have received your E-Mail message containing I-Worm";\
echo "BadTransII virus as an attachement. Message has been";\
echo "blocked. Please contact PostMaster(_at_)geo(_dot_)net(_dot_)ge
for more";\
echo "information.") | $SENDMAIL -t -f
"PostMaster(_at_)geo(_dot_)net(_dot_)ge""
procmail: Assigning "LASTFOLDER=/dev/null"
procmail: Opening "/dev/null"
procmail: Notified comsat: "user(_at_)0:/dev/null"
any suggestions??
Thank you beforehand.
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail