Date: Sat, 03 May 2003 20:38:28 -0400 From: Dragoncrest <dragoncrest@voyager.net> To: freebsd-questions@freebsd.org Subject: Re: Setting spam assassin to capture viruses? Message-ID: <5.2.0.9.2.20030503203713.00a08090@pop.voyager.net> In-Reply-To: <1094.192.168.1.10.1051967100.squirrel@webmail.clifftop.net > References: <5.2.0.9.2.20030503070833.00a04e40@pop.voyager.net> <5.2.0.9.2.20030503070833.00a04e40@pop.voyager.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Ok, so how do I get procmail to dump it into my /home/user1/mail/viruses file?? I know spam assassin drops my spam into /home/user1/mail/spam, so can I get procmail to do the same with files it sees as viruses or those that have forbidden extensions? At 02:05 PM 5/3/03 +0100, Danny Horne wrote: >Dragoncrest was once thought to have said: > > Is there a way I can adjust by hand spam assassin's config file > or one of > > the files it uses to detect spam so that it also will look for attachments > > and if it finds anything with the extension of pif, scr, exe, or com, it > > will automatically flag it as spam and toss it in my spam folder? I want > > to set it to block certain types of attachments on email. Or would that be > > better done with procmail? Qpopper? Just curious what's the best way to > > block these. I figure if spam assassin will do it, I'll just adjust it so > > that it takes care of this for me. Thanks. > > >I use this procmail recipe for that - >:0 fhw >* B ?? ^Content-type: (audio|application) >* B ?? name=.*\.(com|exe|bat|scr|pif|hta|shs|vb[es]|ws[fh])\> >* Subject: *\/.+ >| formail -I "Subject: POSSIBLE VIRUS: $MATCH"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.2.0.9.2.20030503203713.00a08090>