From owner-freebsd-questions Wed Nov 28 16: 1:38 2001 Delivered-To: freebsd-questions@freebsd.org Received: from topaz.mdcc.cx (topaz.mdcc.cx [212.204.230.141]) by hub.freebsd.org (Postfix) with ESMTP id 0324537B419 for ; Wed, 28 Nov 2001 16:01:36 -0800 (PST) Received: from k7.mavetju.org (topaz.mdcc.cx [212.204.230.141]) by topaz.mdcc.cx (Postfix) with ESMTP id 2F9BC2B697; Thu, 29 Nov 2001 01:01:31 +0100 (CET) Received: by k7.mavetju.org (Postfix, from userid 1001) id 903DA2E2; Thu, 29 Nov 2001 11:01:08 +1100 (EST) Date: Thu, 29 Nov 2001 11:01:08 +1100 From: Edwin Groothuis To: Rick Hamell Cc: questions@FreeBSD.org Subject: procmail rule (was: Re: ) Message-ID: <20011129110108.H579@k7.mavetju.org> References: <200111282157.PAA6783064@mtapop1pub.verizon.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from hamellr@heorot.1nova.com on Wed, Nov 28, 2001 at 03:07:31PM -0800 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Nov 28, 2001 at 03:07:31PM -0800, Rick Hamell wrote: > [NON-Text Body part not included] > What's with all these .wav files being sent to the list? They're viri. The easiest way to block them is the the fact that the From-email address starts with an underscore. So for procmail: # Stupid BadTrans virus :0: * ^From: .+ \<_.*\>$ /dev/null :0: * ^From: _.+ \(.+\)$ /dev/null Or you can block it in the MTA, I saw a funny 550 message yesterday: 550 Message not accepted, nobody is stupid enough to have a underscore as first character of their email address. Edwin -- Edwin Groothuis | Personal website: http://www.MavEtJu.org edwin@mavetju.org | Interested in MUDs? Visit Fatal Dimensions: ------------------+ http://www.FatalDimensions.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message