Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 28 Mar 1999 11:44:44 -0800 (PST)
From:      George Yobst <george@lincc.lib.or.us>
To:        freebsd-questions@freebsd.org
Subject:   Sendmail fix for Melissa virus
Message-ID:  <Pine.BSF.4.05.9903281141380.12182-100000@lincc.lincc.lib.or.us>

next in thread | raw e-mail | index | archive | help
Hi all,

I got this patch from CERT (from Sendmail).  Can somebody tell me
where to put it in my sendmail.cf on a 3.1-Release system?
Thanks -George

--------------------------------------------
This will work for all versions of Sendmail 8.9 and Sendmail Pro, and all
commercial sendmails based on 8.9.  We believe, but I cannot guarantee that
this includes Solaris 7 and FreeBSD 3.x.

--
LOCAL_RULESETS
# Kludgey Melissa virus checking routine.
# Just need enough of a pattern to match.
# Instructional note:
#       The format for the rule is 
#               RExactly the thing you want to quote
#       No quote marks, no tabs, absolutely nothing in paretheses (like
this,
#       they're considered comments and will be removed before they get to
#       the rules).  After the exact thing, then a tab, and the $#error.
#       Note, the $* matches anything, so it's useful for wildcarding.
#       This also scans all messages with Subject: headers and invokes a
rule,
#        so there is a performance hit.
HSubject:                       $>local_check_header
D{MelissaMessage}"553 Your message may contain the Melissa virus.  Please
email postmaster@$j if you have questions."

Slocal_check_header
RImportant Message From $*      $#error $: ${MelissaMessage}
RRe: Important Message From $*  $#error $: ${MelissaMessage}
--

---------------------------------------------------------------------
George Yobst, Automation Specialist     email: george@lincc.lib.or.us
LINCC                                   phone: 503-794-3890
16239 SE McLoughlin Blvd, Suite 208       fax: 503-655-8555
Oak Grove, OR 97267-4654            webmaster: [www.]lincc.lib.or.us
"...it is impossible for anyone to begin to learn
 what he thinks he already knows."  - Epictetus



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9903281141380.12182-100000>