On Wed, May 01, 2002 at 09:08:40AM +0200, Lars Gullik Bjønnes wrote: > Mate Wierdl <[EMAIL PROTECTED]> writes: > > | So then removing attachments is just snakeoil: viruses are > | application/octet-stream. > > Doeas all virii use octet-stream? I think not. > > | As for size restriction: it is again snakeoil with the proposed limits: > | Klez is 120K. > > Did you do this only for the mis-benefit of klez? > > btw. filtering is the only way to be somewhat sure.
Yes. Filtering is the only sure way. Excerpts from my procmail recipes (the last one kills klez): :0 * Content-Type: multipart/mixed; .*Outlook_Express_message_ * B ?? (I send you this file in order to have your advice)|(Te mando este archivo para que me des tu punto de vista)|(This is the file with the information that you ask for) /dev/null :0 * Content-Type: multipart * B ?? name=".*\.([pP][iI][fF]|[sS][cC][rR])"$ /dev/null :0 * Content-Type: (text/html)|(multipart/alternative)|(multipart/mixed) * B ?? TVqQAAMAAAAEA /dev/null
msg37472/pgp00000.pgp
Description: PGP signature
