-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, Oct 17, 2003 at 09:01:28AM -0700, Steve C. Lamb wrote: > On Fri, Oct 17, 2003 at 08:16:15AM -0700, Paul Johnson wrote: > > deny message = Message contains malware or a virus ($malware_name). > > log_message = $sender_host_address tried sending $malware_name > > demime = * > > malware = * > > Ya know what would be killer here, a way to log the IP to a flat-file so > we can have a cron job sweep it into shorewall's blacklist file once every 5 > minutes. :)
I was thinking the same thing, but I decided against something like that in favor of being surgical about it. This also prevents somethings like, say, m.d.o, from getting listed. - -- .''`. Paul Johnson <[EMAIL PROTECTED]> : :' : `. `'` proud Debian admin and user `- Debian - when you have better things to do than fix a system -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQE/kBPeUzgNqloQMwcRAn78AKCoRE7VcaATsBPrQhYCYUTSGKvLFgCg4AMd v8Kc+Grmp1+Vp/YPdUfPlgs= =mj01 -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
