On Wed, Dec 25, 2002 at 01:32:50PM -0600, Mike Loiterman wrote:
> How would I block it at the MTA?  I assume you're talking about
> Sendmail.  What about a concise rule for SA?  I'm extremely poor with
> regexp and any help would be greatly appreciated.  Would this do it:

Well, most MTAs allow for blocking on this kind of stuff.

> X-Rot: =~ /zvxr^nfpraqrapl(arg/i

In SA it would be simpler IMHO:

header X_ROT    exists:X-Rot

But I think the suggestion for a rule came up before, and was shot down
due to low hit rates (0 for me for instance).  I believe the 2.50 Bayes
code will catch this very easily BTW. :)

-- 
Randomly Generated Tagline:
> This made me wonder, suddenly: can telnet be written in perl?
 Of course it can be written in Perl.  Now if you'd said nroff,
 that would be more challenging...   -- Larry Wall

Attachment: msg11449/pgp00000.pgp
Description: PGP signature

Reply via email to