procmail
[Top] [All Lists]

Re: Does this recipe look right?

2002-05-05 03:11:02
On Fri, 3 May 2002, Shane Williams wrote:

I know this is pretty easy stuff, but I'm planning on making it
system-wide for nearly 1000 users, so I'd like some re-assurance from
the experts.  (And maybe the signature will help some people out).

I received a Klez signature from a colleague, and what I want to do is
implement a system-wide recipe that will forward a copy to a special
email, and then go ahead and deliver the message to the original
recipient.

Here's what I have:

# test Klez signature
:0 Bc
* ^135AAItEjhyJRI8ci0SOGIlEjxiLRI4UiUSPFItEjhCJRI8Qi0SODIlEjwyLRI4IiUSPCItE$
! someemail(_at_)some(_dot_)server
# Recipe exits and continues normal delivery

If, after a few days, I feel like this is working and not getting
false positives, I'll just remove the "c" flag and have all klezs
diverted to a place where I can continue to inspect for
false-positives.

        I'm not sure that the MIME body is the same in all cases of Klez.
        
        Did you ever try to find something from MIME code? (!)
        most of the time it dose not work.

Bye,
 Udi

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>