On Saturday 10 of January 2004 18:17, Anders Andersen wrote: > Windows virus spam never has your email address in the actual > to: header field, but real people sending you attachments > almost always have. So you simply download all "real mail" and > nuke everything else. Now if people cc/bcc you, this will > unfortunately kill all those. I find this to be acceptable.
I wouldn't like to be your friend :-). No really, nuking all Cc:'ed and Bcc:'ed emails (how do you work with lists?) is really solution worse than the problem. I am sure you have no viruses, but not many friends either, don't you? :-) Get SA (or bogofilter) and be happy. If you really don't want to have all viruses downloaded, then for me this imapfilter rule (which should be reproducable in KMail filters) makes life much easier (of course, you have to check that you have no friends in the Black Land): filter korejci or mask header Content-Type euc-kr mask header Content-Type gb2312 mask header Content-Type big5 mask header Content-Type ks_c_5601-1987 mask header Content-Type iso-2022-jp mask subject ScanMail action delete filter spam or mask From microsoft.com mask From Microsoft mask From ms.net mask Subject "Critical Update" mask Subject "Virus Alert" mask Subject "Current Microsoft Security Patch" mask header X-Spam-Level "****" action move Junk Enjoy! Matej -- Matej Cepl, http://www.ceplovi.cz/matej GPG Finger: 89EF 4BC6 288A BF43 1BAB 25C3 E09F EF25 D964 84AC 138 Highland Ave. #10, Somerville, Ma 02143, (617) 623-1488 He has never been known to use a word that might send a reader to the dictionary. -- William Faulkner (about Ernest Hemingway)