From owner-freebsd-questions Mon Jul 23 0:19:49 2001 Delivered-To: freebsd-questions@freebsd.org Received: from hotmail.com (f160.law9.hotmail.com [64.4.9.160]) by hub.freebsd.org (Postfix) with ESMTP id 0BAC437B405 for ; Mon, 23 Jul 2001 00:19:44 -0700 (PDT) (envelope-from thierryblack@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 23 Jul 2001 00:19:43 -0700 Received: from 207.195.92.134 by lw9fd.law9.hotmail.msn.com with HTTP; Mon, 23 Jul 2001 07:19:43 GMT X-Originating-IP: [207.195.92.134] From: "Thierry Black" To: tedm@toybox.placo.com, freebsd-questions@FreeBSD.ORG Subject: RE: SirCam virus Date: Mon, 23 Jul 2001 01:19:43 -0600 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 23 Jul 2001 07:19:43.0984 (UTC) FILETIME=[D88D7700:01C11347] Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello Ted! Thankyou for the reply. I'm sure procmail is the answer now but as my original post said, I don't know how to make procmail work with cyrus. Your article was really good, but it didn't explain that. Do you know how I can make procmail work with sendmail 8.9.3 and cyrus? thankyou thierry >From: "Ted Mittelstaedt" >To: "Thierry Black" , > >Subject: RE: SirCam virus >Date: Sun, 22 Jul 2001 23:41:26 -0700 >MIME-Version: 1.0 > >Actually this virus is an easy one to block. According to the >advisory there is always one of the following strings: > >"Hi! How are you?" > >"I send you this file in order to have your advice" > >So all you need to do is replace the local delivery agent with >Procmail and write a procmail recipe to filter out messages >containing either of those strings. I did a column on this a >while ago it's here: > >http://www.computerbits.com/archive/1998/1000/lan9810.html > > You really ought to be doing this for your spamfiltering anyway. > >Ted Mittelstaedt >tedm@toybox.placo.com >Author of: The FreeBSD Corporate Networker's >Guide >Book website: >http://www.freebsd-corp-net-guide.com > > > >-----Original Message----- > >From: owner-freebsd-questions@FreeBSD.ORG > >[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Thierry Black > >Sent: Sunday, July 22, 2001 9:32 PM > >To: freebsd-questions@FreeBSD.ORG > >Subject: SirCam virus > > > > > >Hello again! My server has received copies of this "SirCam" virus >notified > >at www.symantec.com. We are using sendmail, and cyrus for delivery. How >can > >I put a rule to block the messages? The subject, sender, attachment name, > >and headers are all random (taken from the virus victims email). The only > >common things are in the body. The messages start with "Hi! How are you?" > >and end with "See you later. Thanks". > > > >I need to block these messages from being sent to or from our email >server. > >I have heard of procmail, but I don't know hwo to use it with sendmail >8.9.3 > >and cyrus. > > > > > >_________________________________________________________________ > >Get your FREE download of MSN Explorer at >http://explorer.msn.com/intl.asp > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > >with "unsubscribe freebsd-questions" in the body of the message > > > _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message