While I had been looking for such a signature for my snort system, one
of my colleagues at UT Austin passed it along (whether he discovered
it or received from elsewhere I don't know). I tested it with
snort, along with some other strings I was trying, and it seemed to be
100% on the mark.
I hope it helps a lot of people, because I don't even use windows and
just as an admin I'm sick of it already.
And thanks to the few of you who responded with your expertise. For
some reason, I envision procmail as the chainsaw that some people can
use to make ice sculptures. In the hands of beginner, you're more
likely than not to cut your own arm off, but when wielded by an expert
it leads to an elegant result. I just want to make sure I keep all my
limbs intact.
On Sun, 5 May 2002, Udi Mottelo wrote:
On Fri, 3 May 2002, Shane Williams wrote:
Here's what I have:
# test Klez signature
:0 Bc
* ^135AAItEjhyJRI8ci0SOGIlEjxiLRI4UiUSPFItEjhCJRI8Qi0SODIlEjwyLRI4IiUSPCItE$
! someemail(_at_)some(_dot_)server
# Recipe exits and continues normal delivery
Yes, it works on my system, very nice (:-) How did you decide
to take THIS line? Why not other?
--
Public key #7BBC68D9 at | Shane Williams
http://pgp.mit.edu/ |
=----------------------------------+-------------------------------
All syllogisms contain three lines | shanew(_at_)shanew(_dot_)net
Therefore this is not a syllogism | www.gslis.utexas.edu/~shanew
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail