RE: [SAtalk] Sobig virus blocking

2003-08-26 Thread Tom Meunier
http://www.exit0.us/index.php/VirusBounceRules -Original Message- From: Steve Combs [mailto:[EMAIL PROTECTED] Sent: Monday, August 25, 2003 11:07 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [SAtalk] Sobig virus blocking Can someone help me write a rule to block the sobgi viru

Re: [SAtalk] SoBig Virus

2003-08-26 Thread Gary Carr
, 2003 1:52 PM To: Patrick Bores Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] SoBig Virus On Fri, Aug 22, 2003 at 11:41:40AM -0500, Patrick Bores is rumored to have said: > > I'd like to add spamassassin rules to match certain attachment > filenames, but I can't seem to get i

RE: [SAtalk] SoBig Virus

2003-08-26 Thread Marek Dohojda
file? I would just block them all. They are 99.9% viruses. -Original Message- From: Steve Thomas [mailto:[EMAIL PROTECTED] Sent: August 22, 2003 1:52 PM To: Patrick Bores Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] SoBig Virus On Fri, Aug 22, 2003 at 11:41:40AM -0500, Patrick Bores is

RE: [SAtalk] SoBig Virus

2003-08-26 Thread John McGivern
Hi, You ever gets a valid .pif file? I would just block them all. They are 99.9% viruses. -Original Message- From: Steve Thomas [mailto:[EMAIL PROTECTED] Sent: August 22, 2003 1:52 PM To: Patrick Bores Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] SoBig Virus On Fri, Aug 22, 2003 at 11

RE: [SAtalk] SoBig Virus

2003-08-26 Thread John McGivern
I realize that and thanks because I'm going to use that rule too! :) JM -Original Message- From: Steve Thomas [mailto:[EMAIL PROTECTED] Sent: August 22, 2003 4:56 PM To: John McGivern Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] SoBig Virus On Fri, Aug 22, 2003 at 03:53:33PM

Re: [SAtalk] SoBig Virus

2003-08-22 Thread Steve Thomas
On Fri, Aug 22, 2003 at 11:41:40AM -0500, Patrick Bores is rumored to have said: > > I'd like to add spamassassin rules to match certain attachment > filenames, but I can't seem to get it right. I'm trying things like: > > rawbody SOBIG_VIRUS > /filename="?application.pif|document_all.pif|t