procmail
[Top] [All Lists]

Re: Ruleset for W32(_dot_)Swen(_dot_)A(_at_)mm?

2003-09-19 10:54:41
Dallman,

On Fri, Sep 19, 2003 at 02:05:43PM +0200, Dallman Ross wrote:
On Fri, Sep 19, 2003 at 10:31:00AM +0000, Klaus Johannes Rusch wrote:
Has anyone written a solid recipe to catch W32(_dot_)Swen(_dot_)A(_at_)mm 
(aka
W32/Gibe-F) yet?

Of course.  And the old virus snaggers posted in the archives
from years ago continue to work, as well.

See a public version of what I use, at 
http://www.spamless.us/pub/procmail/virussnag

Thank you very much for the above -- it is a life saver!  Until a few
days ago, bogofilter met all of my spam suppression needs.  Now it
doesn't... :,(

BTW, I added "bat" and "com" to NASTYEXT to catch the few that still
trickled in:

    NASTYEXT=(bat|com|exe|hta|pif|scr|shs|vb[se]|ws[fh]|(doc|txt|xls)\.)
    INCLUDERC=$HOME/.procmailrc-virussnag

Thanks,
Jason

-- 
PGP/GPG Key: http://www.tishler.net/jason/pubkey.asc or key servers
Fingerprint: 7A73 1405 7F2B E669 C19D  8784 1AFD E4CC ECF4 8EF6

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail