[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] ID wwywxugwisi... thanks



Hi,

On Tue, Feb 17, 2004 at 11:38:41PM +0100, Sjag Steensma wrote:
> >...
> >fact, I'm rejecting these kinds of attachments on incoming e-mail for a 
> >while
> >(so I missed the e-mail starting this thread).
> 
> Good, how did you do that?

personally I use this little procmail rule to get rid of this lad.

# get everything exept pgp signatures
:0 HB
* ^Content-Type: application
* !^Content-Type: application/pgp-signature
virus-ml

# another possible rule maybe this one
:0 HB
* ^Content-Disposition.*filename=".*\.(bat|chm|cmd|cnm|com|exe|hta|\
jse?|lnk|pif|reg|scr|shb|shs|vb[esx]|vdx|zip|xls|doc|ppt|ws[fh])"
virus-ml

Greetings Daniel
-- 
#!/usr/bin/perl
use Fcntl;$s=$ENV{"HOME"}."/.sigs";sysopen(S,"$s",O_RDONLY)||die;
$p[0]=0;while(<S>){$p[$#p+1]=tell if /^$/;}seek(S,$p[int rand($#p\
+.9999)],seek_set)||die;while(<S>){last if /^$/;$z.=$_;}close S;
print"$z";#      by Janto Trappe

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here