Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Jun 2001 15:35:07 -0700
From:      Erick Mechler <emechler@techometer.net>
To:        faSty <fasty@i-sphere.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: need help filter this stupid virus. Sendmail didnt stop this.
Message-ID:  <20010620153507.P73138@techometer.net>
In-Reply-To: <20010620152023.C19358@i-sphere.com>; from faSty on Wed, Jun 20, 2001 at 03:20:23PM -0700
References:  <20010620152023.C19358@i-sphere.com>

next in thread | previous in thread | raw e-mail | index | archive | help
You don't need the from.  For example, try this:

[emechler@lucifer ~]$ cat /etc/mail/access
hahaha@sexyfun.net	REJECT

(you can't use DISCARD unless you've defined your discard mailer).  REJECT 
works across the board.  Also, you might want to try this if you don't like 
the generic error message REJECT will return:

hahaha@sexyfun.net	ERROR:"550: I don't want your stupid virus"

If you want to use the access.db at all, you also need to make sure that
you have the following in your .mc file:

FEATURE(`access_db')dnl

Read /usr/src/contrib/sendmail/cf/README for more information on any of the
stuff I've mentioned.

--Erick

At Wed, Jun 20, 2001 at 03:20:23PM -0700, faSty said this:
:: Hi there,
:: 
::  I need help, I tried filter on Sendmail to reject or discard when it 
:: match "From:hahaha@sexyfun.net" seem not success stop these stupid virus email
:: and it kept coming back repeat like every 2 or 3 days.
:: 
:: Here the full email header.
:: 
:: >From MAILER-DAEMON Wed Jun 20 14:50:40 2001
:: Return-Path: <MAILER-DAEMON>
:: Received: from oemcomputer (mewi1pool0-a3.midway.tds.net [208.166.196.132])
::         by i-sphere.com (8.11.3/8.11.3) with SMTP id f5KLoPT19225
::         for <techsupport@i-sphere.com>; Wed, 20 Jun 2001 14:50:26 -0700 (PDT)
:: Date: Wed, 20 Jun 2001 14:50:26 -0700 (PDT)
:: Message-Id: <200106202150.f5KLoPT19225@i-sphere.com>
:: From: Hahaha <hahaha@sexyfun.net>
:: Subject: Snowhite and the Seven Dwarfs - The REAL story!
:: MIME-Version: 1.0
:: Content-Type: multipart/mixed; boundary="--VE1EZOLMJK92BC9UN"
:: To: undisclosed-recipients:;
:: Status: RO
:: Content-Length: 31647
:: Lines: 422
:: 
:: 
:: 
:: -- /etc/mail/access --
:: 
:: From:hahaha@sexyfun.net      DISCARD
:: hahaha@sexyfun.net   DISCARD
:: 
:: -- end snip --
:: 
:: I searched www.google.com (search engine) find the solution for the FreeBSD
:: sendmail's filter on hahaha@sexyfun.net. I found most talk about procmail
:: but i looked the FreeBSD sendmail isnt run by procmail based. 
:: 
:: HELP!
:: 
:: -trev
:: 
:: To Unsubscribe: send mail to majordomo@FreeBSD.org
:: with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010620153507.P73138>