David Talkington wrote:
>
> We did something similar (but incorporated your sed idea after reading
> your post; that preserves the original subject line, thank you). We
> also tried adding another condition whose purpose is to prevent
> further processing if there is no attachment. The idea was to lessen
> the load on the processor which would result from scanning every
> single message body for .vbs. Since conditions are "anded", this
> seems to have the desired result:
>
> :0
> * ^Content-Type: multipart/mixed;
> * B ?? \\.vbs
> {
> :0 c:
> /var/mail/attachments.vbs
>
> :0 h f
> | /bin/sed -e 's/^Subject:/Subject: [PRAIRIENET SYSTEMS
> ALERT: MAY CONTAIN A VIRUS ATTACHMENT]/'
> }
>
> Thoughts?
> -d
This fixes a problem I was having. A locally hosted majordomo mailing list
was getting duplicate messages that look like they were created by my
original filter. I'll have to think about when sendmail delivers to
procmail, aliases, and majordomo in order to figure this out.
Tony
--
Anthony E. Greene <[EMAIL PROTECTED]>
Homepage & PGP Key <http://www.pobox.com/~agreene/>
Linux: The choice of a GNU Generation.
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
