From owner-freebsd-questions@FreeBSD.ORG Sat May 3 06:05:02 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E8B5D37B401 for ; Sat, 3 May 2003 06:05:02 -0700 (PDT) Received: from smtp.clifftop.net (machassociates-2.dsl.easynet.co.uk [217.204.162.178]) by mx1.FreeBSD.org (Postfix) with ESMTP id E271F43FA3 for ; Sat, 3 May 2003 06:05:01 -0700 (PDT) (envelope-from danny@clifftop.net) Received: from officemail.clifftop.net (localhost.clifftop.net [127.0.0.1]) by smtp.clifftop.net (8.12.9/8.12.9) with SMTP id h43D50UG057577; Sat, 3 May 2003 14:05:00 +0100 (BST) Received: from 192.168.1.10 (SquirrelMail authenticated user danny) by webmail.clifftop.net with HTTP; Sat, 3 May 2003 14:05:00 +0100 (BST) Message-ID: <1094.192.168.1.10.1051967100.squirrel@webmail.clifftop.net> In-Reply-To: <5.2.0.9.2.20030503070833.00a04e40@pop.voyager.net> References: <5.2.0.9.2.20030503070833.00a04e40@pop.voyager.net> Date: Sat, 3 May 2003 14:05:00 +0100 (BST) From: "Danny Horne" To: "Dragoncrest" User-Agent: SquirrelMail/1.4.0 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 X-Priority: 3 Importance: Normal cc: freebsd-questions@freebsd.org Subject: Re: Setting spam assassin to capture viruses? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 May 2003 13:05:03 -0000 Dragoncrest was once thought to have said: > Is there a way I can adjust by hand spam assassin's config file or one of > the files it uses to detect spam so that it also will look for attachments > and if it finds anything with the extension of pif, scr, exe, or com, it > will automatically flag it as spam and toss it in my spam folder? I want > to set it to block certain types of attachments on email. Or would that be > better done with procmail? Qpopper? Just curious what's the best way to > block these. I figure if spam assassin will do it, I'll just adjust it so > that it takes care of this for me. Thanks. > I use this procmail recipe for that - :0 fhw * B ?? ^Content-type: (audio|application) * B ?? name=.*\.(com|exe|bat|scr|pif|hta|shs|vb[es]|ws[fh])\> * Subject: *\/.+ | formail -I "Subject: POSSIBLE VIRUS: $MATCH"