From owner-freebsd-security Wed Nov 28 1:26:54 2001 Delivered-To: freebsd-security@freebsd.org Received: from postoffice.aims.com.au (eth0.lnk.aims.com.au [203.31.73.253]) by hub.freebsd.org (Postfix) with ESMTP id 129BE37B419 for ; Wed, 28 Nov 2001 01:26:50 -0800 (PST) Received: from postoffice.aims.com.au (nts-ts1.aims.private [192.168.10.2]) by postoffice.aims.com.au with ESMTP id fAS9Qm184507 for ; Wed, 28 Nov 2001 20:26:49 +1100 (EST) (envelope-from chris@aims.com.au) Received: from ntsts1 by aims.com.au with SMTP (MDaemon.v3.5.3.R) for ; Wed, 28 Nov 2001 20:26:09 +1100 Reply-To: From: "Chris Knight" To: Subject: Latest Outlook-borne Viruses and sendmail Date: Wed, 28 Nov 2001 20:26:07 +1100 Message-ID: <004201c177ee$b68a4000$020aa8c0@aims.private> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700 X-Return-Path: chris@aims.com.au X-MDaemon-Deliver-To: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Howdy, If anyone's interested, I've found the following snippet useful for blocking the latest round of Outlook viruses using sendmail. Just remove the LOCAL_RULESETS and add it before the mailer definitions section in sendmail.cf if you're not using m4 config files. You'll need to fix the wordwrap of course. Naturally, use at your own risk, YMMV, etc... --->snip<--- LOCAL_RULESETS HX-Unsent: $>CheckUnsent SCheckUnsent R1 $#error $@ 5.7.1 $: 550 X-Unsent header suggests e-mail virus; please remove virus then resend --->snip<--- Regards, Chris Knight Systems Administrator AIMS Independent Computer Professionals Tel: +61 3 6334 6664 Fax: +61 3 6331 7032 Mob: +61 419 528 795 Web: http://www.aims.com.au To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message