From owner-freebsd-questions Sun Mar 28 11:45:10 1999 Delivered-To: freebsd-questions@freebsd.org Received: from lincc.lincc.lib.or.us (lincc.lincc.lib.or.us [198.245.131.10]) by hub.freebsd.org (Postfix) with ESMTP id 15C2A152D9 for ; Sun, 28 Mar 1999 11:45:03 -0800 (PST) (envelope-from george@lincc.lib.or.us) Received: from localhost (george@localhost) by lincc.lincc.lib.or.us (8.9.2/8.9.2) with ESMTP id LAA12541 for ; Sun, 28 Mar 1999 11:44:44 -0800 (PST) (envelope-from george@lincc.lib.or.us) Date: Sun, 28 Mar 1999 11:44:44 -0800 (PST) From: George Yobst To: freebsd-questions@freebsd.org Subject: Sendmail fix for Melissa virus Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi all, I got this patch from CERT (from Sendmail). Can somebody tell me where to put it in my sendmail.cf on a 3.1-Release system? Thanks -George -------------------------------------------- This will work for all versions of Sendmail 8.9 and Sendmail Pro, and all commercial sendmails based on 8.9. We believe, but I cannot guarantee that this includes Solaris 7 and FreeBSD 3.x. -- LOCAL_RULESETS # Kludgey Melissa virus checking routine. # Just need enough of a pattern to match. # Instructional note: # The format for the rule is # RExactly the thing you want to quote # No quote marks, no tabs, absolutely nothing in paretheses (like this, # they're considered comments and will be removed before they get to # the rules). After the exact thing, then a tab, and the $#error. # Note, the $* matches anything, so it's useful for wildcarding. # This also scans all messages with Subject: headers and invokes a rule, # so there is a performance hit. HSubject: $>local_check_header D{MelissaMessage}"553 Your message may contain the Melissa virus. Please email postmaster@$j if you have questions." Slocal_check_header RImportant Message From $* $#error $: ${MelissaMessage} RRe: Important Message From $* $#error $: ${MelissaMessage} -- --------------------------------------------------------------------- George Yobst, Automation Specialist email: george@lincc.lib.or.us LINCC phone: 503-794-3890 16239 SE McLoughlin Blvd, Suite 208 fax: 503-655-8555 Oak Grove, OR 97267-4654 webmaster: [www.]lincc.lib.or.us "...it is impossible for anyone to begin to learn what he thinks he already knows." - Epictetus To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message