On Sat, 17 Jun 2006, Michael Monnerie wrote: > Hello list, today I had a forged ebay e-mail containing an attachment > with a trojan. I would like to filter for the attachment name, is that > possible without a "full" rule? > > full ZMIde_EBAYBILL1 /name="Ebay-Rechnung.pdf.zip"/ > describe ZMIde_EBAYBILL1 false ebay bill .zip file > score ZMIde_EBAYBILL1 4.9
<plug> http://www.impsec.org/email-tools/procmail-security.html </plug> -- John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/ [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- What nuts do with guns is terrible, certainly. But what evil or crazy people do with *anything* is not a valid argument for banning that item. -- John C. Randolph <[EMAIL PROTECTED]> ----------------------------------------------------------------------- Tomorrow: SWMBO's Birthday
