#protection from csrss.exe
:0 B
* csrss.exe
/dev/null
#protection from certain filetypes
:0
* 9876543210^0
^Content-[-a-z0-9_]+:.*="?[^"]*\.(vb[se]|ws[fh]|hta|shs|scr|pif)
* 9876543210^0 B ??
ontent-[-a-z0-9_]+:.*($[ ].*)*="?[^"]*\.(vb[se]|ws[fh]|h$|pif|scr)
/dev/null
The first recipie checks for a specific exe and the second one checks for a
few specific filename extensions and then bins them.
Robin
----- Original Message -----
From: "Sam Morris" <sam(_at_)loganet(_dot_)net>
To: <procmail-users(_at_)procmail(_dot_)org>
Sent: Friday, November 30, 2001 7:19 PM
Subject: Delete a specific EXE
Is there a way using procmail that I can send mail with a specific
attachment name to /dev/null?
For example, there is a new virus that comes with the attachment named
either quake4demo.exe, honey.exe, or setup.exe. If I want to send
anything
coming into my mail server to /dev/null or some other place, is there a
recipe that will do that?
Thanks
Sam
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail