> Does any one have a procmail recipie to filter out Emails with attatchments?
>
> I would like to send any mail with possible virus content to /dev/null , any
> .exe .shs .pif .vbs and anything with a double extension (*.txt.vbs).
This might do the job for you:
:0:
* 9876543210^0 ^Content-[-a-z0-9_]+:.*="?[^"]*\.(vb[se]|ws[fh]|hta|shs|\
pif|(doc|txt|xls)\.)
* 9876543210^0 B ?? ^Content-[-a-z0-9_]+:.*($[ ].*)*=[ ]*\
($[ ]+)*"?[^"]*\.(vb[se]|ws[fh]|hta|shs|pif|\
(doc|txt|xls)\.)
virusfilter
The square brackets with whitespace between contain one space and one
tab!
Best to redirect to a mailbox that you can check and regularly empty,
rather than /dev/null, so that you can recover from getting it wrong!!
Martin
--
Martin McCarthy /</ http://procmail.non-prophet.org
`Procmail Companion' \>\
Addison Wesley /</ PGP key available
--------------------------------------------------------------------
http://www.lug.org.uk http://www.linuxportal.co.uk
http://www.linuxjob.co.uk http://www.linuxshop.co.uk
--------------------------------------------------------------------
