Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Jan 2001 10:26:58 -0600
From:      Marcel Mason <mmason@nunanet.com>
To:        heckfordj@psi-domain.co.uk
Cc:        freebsd-isp@freebsd.org
Subject:   Re: sendmail rulesets
Message-ID:  <3A6DB0D2.5543A679@nunanet.com>
References:  <20010123092722.A234@freefire.psi-domain.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
Jamie Heckford wrote:
> 
> Hi,
> 
> Bit stuck trying to implement the following:

Assuming that you are looking at blocking some of the pesky little virus
files that are running around these days .......

##### Check For ILOVEYOU in subject line.... 
HSubject:       $>local_check_subject
D{BadSubject}"ILOVEYOU"
  
Slocal_check_subject
R${BadSubject}  $#error $@ 5.7.1 $: 550 message rejected: Possible I
Love You Trojan infection
R$* ILOVEYOU $* $#error $@ 5.7.1 $: 550 message rejected: Possible I
Love You Trojan infection
#####

I inserted this under S98 in the sendmail.cf to deal with the LoveBug
last year and am putting a similiar one in this week to deal with
Snowhite and her 7 hombres'. CAVEATS: Make sure each line is a single
line, make sure that there is a TAB immediately before "$#error", if
it's a SPACE it won't work.

As there are sometimes quite good reasons for sending .exe files
(self-extracting archives for example) some users may complain if you
block them all, the above allows you to target a specific set of files.

Marcel


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A6DB0D2.5543A679>