On Fri, Jan 03, 2003 at 05:43:00PM -0600, scott wrote:
Greetings:
Does anyone have a specific recipe to filter the
W32/Yaha-K worm?
Thanks very much for the time to share if you do,
Scott
Yaha should get blocked with a generic executable blocker, for example:
:0 fhw
* B ?? ^Content-type: (audio|application)
* B ?? name=.*\.(com|exe|bat|scr|pif|hta|shs|vb[es]|ws[fh])\>
* Subject: *\/.+
| formail -I "Subject: POSSIBLE VIRUS: $MATCH"
--
Paul Chvostek
<paul(_at_)it(_dot_)ca>
Operations / Abuse / Whatever
it.canada, hosting and development http://www.it.ca/
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail