On 09/29/03 03:46 PM, A nonymous sat at the `puter and typed: > > I realise that these aren't spam in the exact sense of the word > > close cousin though! > > > but wondered if anyone had a set of rules that might help filter > > out this damn annoying messages. We're getting several hundred a > > day. > > This procmail rule has trapped hundreds a day with no false > positives. I guess you could map something with RAW_TEXT for > spamassassin. > > :0B > * >140000 > * <190000 > * BTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4ga > { > LOG=">>>>>> Win32.Swen.A. virus$NL" > :0h: > $QUARANTINE > } > > # you could /dev/null them obviously but I like to look where they > are from.
Thanks for this recipe! It's caught quite a few already, and I've not seen any FP either. Isn't there a page somewhere that posts these recipes as the Virii come out? I realize this is starting to get a little OT, but I know a good number of people here are fairly procmail savvy. Thanks. Lou -- Louis LeBlanc [EMAIL PROTECTED] Fully Funded Hobbyist, KeySlapper Extrordinaire :) http://www.keyslapper.org ԿԬ Mitchell's Law of Committees: Any simple problem can be made insoluble if enough meetings are held to discuss it. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk