Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 21 Sep 2003 22:00:30 +0700 (OMSST)
From:      "Evgueni V. Gavrilov" <aquatique@rusunix.org>
To:        freebsd-stable@FreeBSD.ORG
Subject:   Re: Sieve script to filter today's MS annoyances
Message-ID:  <20030921150030.6D1041CBB41@rusunix.org>
In-Reply-To: <200309191729.h8JHTDal019393@lurza.secnetix.de>

next in thread | previous in thread | raw e-mail | index | archive | help

In article <200309191729.h8JHTDal019393@lurza.secnetix.de> of freebsd.stable group you wrote:

OF> I got lots of those, too.  From looking at the headers,
OF> there didn't seem to be very reliable things to identify
OF> that crap, so i decided to filter by body.
this solution could be inappropriate on mail hubs with thousand accounts, because the body of the virus should be received in order to check it
I found that Subject withing headers written by capital chars (i.e. SUBJECT:) and use it in order to identify the virus (yes, I don't care about ancient MTAs ;-)

-- 
http://aquatique.rusunix.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030921150030.6D1041CBB41>