JM> OK, I'm curious. How do you suggest this can be done using MailMan 2.0.9? JM> as far as I can see, there's no way to filter out attachments.
I use Mailman 2.0.13, so it's possible that it has a feature that 2.0.9 doesn't - in which case they really ought to upgrade, given the fact that Mailman is free - however, here's the easy way: 1. Under "General Options": Set the message size limit way lower than 150kb - the majority of pots size of posts to this list are under 10K, a setting of 50K would let almost all legit emails through but stop a large number of worm attachments. 2. Under "Privacy Options": use the spam filtering option of "Hold posts with header value matching a specified regexp" to hold anything with the following string value: boundary="CSmtpMsgPart123X456_000.*" I see that string on all of the Sobig.E, including the ones that came through the list, as well as on some earlier versions of Sobig - I ran a search of clean emails stored on my system, including 605 recent posts from this SATalk list, and didn't see a single instance of that string, EXCEPT for some of the infected files that came through. So I think you'd be pretty successful at stopping the current virus with that entry. -Abigail JM> Bear in mind those messages are < 150Kb in size (the size limit of the JM> list). JM> Anyway, I've set up "non-subscribers cannot post", which should help JM> a little. JM> --j. JM> ------------------------------------------------------- JM> This SF.Net email sponsored by: Free pre-built ASP.NET sites including JM> Data Reports, E-commerce, Portals, and Forums are available now. JM> Download today and enter to win an XBOX or Visual Studio .NET. JM> http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 JM> _______________________________________________ JM> Spamassassin-talk mailing list JM> [EMAIL PROTECTED] JM> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
