On 09/29/03 03:46 PM, A nonymous sat at the `puter and typed:
> > I realise that these aren't spam in the exact sense of the word
> 
> close cousin though!
> 
> > but wondered if anyone had a set of rules that might help filter
> > out this damn annoying messages. We're getting several hundred a
> > day.
> 
> This procmail rule has trapped hundreds a day with no false
> positives. I guess you could map something with RAW_TEXT for
> spamassassin.
> 
> :0B
> * >140000
> * <190000
> * BTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4ga
> {
>    LOG=">>>>>> Win32.Swen.A. virus$NL"
>    :0h:
>    $QUARANTINE
> }
> 
> # you could /dev/null them obviously but I like to look where they
> are from.

Thanks for this recipe!  It's caught quite a few already, and I've not
seen any FP either.

Isn't there a page somewhere that posts these recipes as the Virii
come out?  I realize this is starting to get a little OT, but I know a
good number of people here are fairly procmail savvy.

Thanks.
Lou
-- 
Louis LeBlanc               [EMAIL PROTECTED]
Fully Funded Hobbyist, KeySlapper Extrordinaire :)
http://www.keyslapper.org                     ԿԬ

Mitchell's Law of Committees:
  Any simple problem can be made insoluble if enough meetings are
  held to discuss it.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to