I got two copies today of a BadTrans-style worm (uses an <iframe> to try
to load an audio attachment) which sneaked through my procmail virus trap.
Turns out it got through because of a typo in one condition line.
I've updated <http://www.well.com/user/barts/email/viriirc.txt> with the
typo fixed. Credit where credit is due: This is based on John Conover's
quarantine.outlook.attachments.txt.
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail