Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 03 May 2003 22:52:05 -0400
From:      Dragoncrest <dragoncrest@voyager.net>
To:        "Danny Horne" <danny@clifftop.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Setting spam assassin to capture viruses?
Message-ID:  <5.2.0.9.2.20030503225138.00a3e590@pop.voyager.net>
In-Reply-To: <1094.192.168.1.10.1051967100.squirrel@webmail.clifftop.net >
References:  <5.2.0.9.2.20030503070833.00a04e40@pop.voyager.net> <5.2.0.9.2.20030503070833.00a04e40@pop.voyager.net>

next in thread | previous in thread | raw e-mail | index | archive | help
         Uh, got a slight problem with that recipe you sent me.  It's now 
corrupting my inbox.

At 02:05 PM 5/3/03 +0100, Danny Horne wrote:

>Dragoncrest was once thought to have said:
> >       Is there a way I can adjust by hand spam assassin's config file 
> or one of
> > the files it uses to detect spam so that it also will look for attachments
> > and if it finds anything with the extension of pif, scr, exe, or com, it
> > will automatically flag it as spam and toss it in my spam folder?  I want
> > to set it to block certain types of attachments on email.  Or would that be
> > better done with procmail?  Qpopper?  Just curious what's the best way to
> > block these.  I figure if spam assassin will do it, I'll just adjust it so
> > that it takes care of this for me.  Thanks.
> >
>I use this procmail recipe for that -
>:0 fhw
>* B ?? ^Content-type: (audio|application)
>* B ?? name=.*\.(com|exe|bat|scr|pif|hta|shs|vb[es]|ws[fh])\>
>* Subject: *\/.+
>| formail -I "Subject: POSSIBLE VIRUS: $MATCH"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.2.0.9.2.20030503225138.00a3e590>