Re: Delete a specific EXE

At 18:41 2001-11-30 -0600, Sam wrote:
> All I was asking is if there is a way to test for the presence of a given 
> filename attached to an email. I didn't think there would be, but I am new 
> to this, and wasn't sure.
The manpages would have told you otherwise, which was the whole point of 
the original RTFM comment.  Instead of coming back and saying you didn't 
understand some part of the docs (and what that part was), or even saying 
you'd done _ANYTHING_ whatsoever using procmail (even one of the scores of 
filters in the manpages and FAQ), you decided to lambast the members of 
this list.
> I am truly sorry that I wasn't born with a complete understanding of 
> procmail and MIME,
Nor was I - that's why manpages and extensive FAQs exist - to be read.  Do 
you think people work on these things just to churn out webfodder?  Why is 
it so offensive to be directed to them, and to specific parts?
> The last thing I expected was to have four or five self righteous 
> pretentious egotistical jerks belittle me over this question.
There you go with namecalling again.  If you want to sling names, mind 
doing it offlist at the people who called you names?  It sure looks like 
you're calling _me_ names since this is posted in followup to the post in 
which I took the time to provide you with a working prototype and 
references to where you could easily find more information.  Such gratitude!
> And over and over I have seen people ask for help *after* they have read 
> the f'ing manual,
IMO, often these people demonstrate in their questions that they had their 
eyes closed while reading the manual.
I'm guilty of that from time to time myself, and get duly reminded of 
it.  I don't go calling my fellow listmembers names as a result.
> but didn't understand it as well as need be, and like me were accused of 
> not really reading it, rather than being accepted for reading it but not 
> understanding it.
Okay, I accept your excuse - you didn't understand the manpages.  So move 
on to the FAQs.  Jari's documentation for example cites several rulesets 
which are applicable (and quite obviously so to anyone who reviews the FAQ 
- whether they understand MIME or not).  Nab one, and ask "so, how would I 
go about modifying this to make it throw away just attachments with this 
one filename, or set of filenames?"
> I have been reading this list for a while,
Great, so then you caught this post from just yesterday, which itself is 
part of a discussion that's been running for about four days now:
<http://www.rosat.mpe-garching.mpg.de/mailing-lists/procmail/2001-11/msg00357.html>


Here's another interesting example from the archives (albeit, nearly two 
months ago):
<http://www.rosat.mpe-garching.mpg.de/mailing-lists/procmail/2001-10/msg00043.html>

Want to know what archive search expression pulled these up?  "name=".  If 
you EXAMINE your messages, the significance of this as a search term should 
be painfully obvious.  You can see a partial list of the extensive results at:
<http://www.rosat.mpe-garching.mpg.de/cgi-bin/w3glimpse/procmail?query=name%3D&errors=0&case=on&whole=on&maxfiles=100&maxlines=30>


Or, if the manpages, FAQ, and archives aren't your speed, try hitting 
almost any search engine (I use altavista here, but so long as the search 
criteria are formed proper for the search engine you use, most any should 
work reasonably well) and progressively search using likely keywords - you 
need to add more to REDUCE the number of hits that are presented, because 
there is SO MUCH material out there on this general topic:
        "+procmail +virus"

        "+procmail +virus +attachment"

        "+procmail +virus +attachment +delete"

        "+procmail +virus +attachment +delete -qmail"

Among the plethora of useful hits, are:

        <http://www.spambouncer.org/>

        <http://www.impsec.org/email-tools/sanitizer-configuration.html>

        (the above two are filter "kits" which are written in procmail)

        <http://www.cs.fiu.edu/campus/cndg/msg00015.html>

        (gosh, look at that, a ruleset written to match a specific filename,
        though for "ILOVEYOU", it seems like a good candidate to start
        learning on).

Minimum amount of legwork, and ZERO understanding of procmail or MIME, and 
we have several viable resources (and a hundred or so other links I didn't 
even glance at).  Spambouncer and Sanitizer are both ideal candidates for 
someone looking to install something they don't understand.
> and have followed the discussion about checking for a string of data in 
> the body of the email.  I wasn't asking how to do that. I was asking if 
> there is a way to check for a given filespec of an attachment.
.. which is .. get this .. specified as a string in the body.  Have you 
tried  EXAMINING the message that the attachment arrives in?  Not using 
your mail client which hides detail from you, but in the mailbox itself 
(say, using less)?
> are not God almighty,
Which is an almighty good thing if you're an atheist, because then you 
wouldn't exist!
---
 Sean B. Straw / Professional Software Engineering

 Procmail disclaimer: <http://www.professional.org/procmail/disclaimer.html>
 Please DO NOT carbon me on list replies.  I'll get my copy from the list.

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail