Several rules can be combined into one as well ... Things like:
A virus was detected
virus detected
can be described as .*virus.*detected.*
I don't see too many foreign ones so I dropped a lot of those.
I also had to escape the periods and colons. Ie:
.*Non delivery report\: 5\.9\.5 \(Blocked attachment\).*
At 01:15 PM 8/27/2004, Anton Alin-Adrian wrote:
[EMAIL PROTECTED] wrote:
One comment. The line:
.*Invalid content in mail message (message rejected).* Virus-Subject:
bogus antivirus
should be
.*Invalid content in mail message \(message rejected\).*
Virus-Subject: bogus antivirus
And actually, I would say:
.*Invalid content in mail message \(.*\).* Virus-Subject: bogus antivirus
The first line will not block that subject line, but the second and third one will... There are probably others like this, like:
.*Non delivery report: 5.9.5 (Blocked attachment).* Virus-Subject:
bogus antivirus
Also it seems some of the ones with exclamation marks are escaped but others aren't...
Thanks for the extensive list.
Thanks for the remarks, I will correct them and repost. I hope I can find a place for a website regarding information like this.
Regards,
--
Alin-Adrian Anton
Spintech Systems
GPG keyID 0x1E2FFF2E (2963 0C11 1AF1 96F6 0030 6EE9 D323 639D 1E2F FF2E)
gpg --keyserver pgp.mit.edu --recv-keys 1E2FFF2E
