Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 29 Nov 2001 11:01:08 +1100
From:      Edwin Groothuis <edwin@mavetju.org>
To:        Rick Hamell <hamellr@heorot.1nova.com>
Cc:        questions@FreeBSD.org
Subject:   procmail rule (was: Re: )
Message-ID:  <20011129110108.H579@k7.mavetju.org>
In-Reply-To: <Pine.BSF.4.21.0111281507090.55916-100000@heorot.1nova.com>; from hamellr@heorot.1nova.com on Wed, Nov 28, 2001 at 03:07:31PM -0800
References:  <200111282157.PAA6783064@mtapop1pub.verizon.net> <Pine.BSF.4.21.0111281507090.55916-100000@heorot.1nova.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Nov 28, 2001 at 03:07:31PM -0800, Rick Hamell wrote:
>   [NON-Text Body part not included]
> 	What's with all these .wav files being sent to the list?

They're viri. The easiest way to block them is the the fact that
the From-email address starts with an underscore.

So for procmail:
# Stupid BadTrans virus
:0:
* ^From: .+ \<_.*\>$
/dev/null
:0:
* ^From: _.+ \(.+\)$
/dev/null


Or you can block it in the MTA, I saw a funny 550 message yesterday:
550 Message not accepted, nobody is stupid enough to have a underscore as first character of their email address.

Edwin

-- 
Edwin Groothuis   |              Personal website: http://www.MavEtJu.org
edwin@mavetju.org |           Interested in MUDs? Visit Fatal Dimensions:
------------------+                       http://www.FatalDimensions.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011129110108.H579>