Or stick the entire friendgreeting.com net range in tcp.stmp if you use tcpserver (use www.hexillion.com/utilities to look up the netrange).
Or look through the internet headers for e-card email (if you have have received it already), and block the ip it came from Michael Martinez > -----Original Message----- > From: Doug Monroe [mailto:doug@;planetconnect.com] > Sent: Tuesday, October 29, 2002 9:00 AM > To: Darley Ware > Cc: [EMAIL PROTECTED] > Subject: Re: [Qmail-scanner-general]Using quarantine-attachments for > e-card marketing worm > > > Darley Ware wrote: > > > > Hello, > > > > I want to use the quarantine-attachments feature to block > the new E-Card > > marketing worm from FriendGreetings.com. > > > > http://www.sophos.com/virusinfo/articles/greetings.html > > > > My question is can I block messages from an entire domain? > I tried the > > following but it did not work... > > > > .*friendgreetings.com Virus-From: E-Card marketing worm > > why not put @friendgreetings.com in /var/qmail/control/badmailfrom > (and restart)? > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general > ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
