Re: [OT] new virus? (was Re: unsubscribe)
On Mon, Sep 29, 2003, Idan Sofer wrote about "Re: [OT] new virus? (was Re: unsubscribe)": > # "Current Security Pack", "New Security Update", etc. > allof( > header :matches "Subject" [ > "current*", > "last*", > "latest*", > "microsoft*", > "new*", > "newest*" ], > header :matches "Subject" [ > "*upgrade", > "*update", > "*pack", > "*patch" ] It appears that this rule will also discard a message with Subject of "last week's upgrade", "new battery pack", "microsoft is forcing me to upgrade", "new openssh patch", or other unrelated subject lines... Not very high chance of that happening, but watch out... -- Nadav Har'El| Monday, Sep 29 2003, 3 Tishri 5764 [EMAIL PROTECTED] |- Phone: +972-53-790466, ICQ 13349191 |If God had intended us to be vegetarians, http://nadav.harel.org.il |He wouldn't have made animals out of meat = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: [OT] new virus? (was Re: unsubscribe)
On Friday 26 September 2003 13:16, you wrote:
> Over the last couple of weeks I've been getting up to a thousand a
> day. Just checked - 286 have arrived since last night. Probably a
> combination of "Swen" and a few oldies. Luckily for me, they all are
I've suffered greatly from this recent plaque - however, with the help of
google I've found a sieve ruleset that deals with those beasts:
Virus detection
# 2003-09-18: Something stupid and Microsofty
if anyof(
# This one is super-annoying; it mimics real bounce messages
allof(
header :matches "From" [
"email*",
"internet*",
"microsoft*",
"ms*" ],
header :matches "From" [
"*service",
"*system"
],
header :is "Subject" [
"abort advice",
"abort letter",
"Error Notice",
"mail: user unknown",
"Returned Mail",
"returned message" ]
),
# "Current Security Pack", "New Security Update", etc.
allof(
header :matches "Subject" [
"current*",
"last*",
"latest*",
"microsoft*",
"new*",
"newest*" ],
header :matches "Subject" [
"*upgrade",
"*update",
"*pack",
"*patch" ]
)
)
{
discard;
}
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
Re: [OT] new virus? (was Re: unsubscribe)
Diego Iastrubni <[EMAIL PROTECTED]> writes: > Talking about AntiVirus and microsoft... > > I keep receiving mails > titled "Last Net Security Update" > from "Microsoft Internet Security Department" > <[EMAIL PROTECTED]> > to "Microsoft Client" <[EMAIL PROTECTED]> > > does anyone know something about that? Over the last couple of weeks I've been getting up to a thousand a day. Just checked - 286 have arrived since last night. Probably a combination of "Swen" and a few oldies. Luckily for me, they all are filtered into my "other" folder because my setup carefully sorts the mails I get, but the messages are numerous, senders and the subjects are much more diverse than before, so I am seriously considering adding a Bayesian filter for extra performance. After all, there is a chance that a real email will be classified as "other", so I do glance over senders and subjects once a day. -- Oleg Goldshmidt | [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
[OT] new virus? (was Re: unsubscribe)
ביום חמישי, 25 בספטמבר 2003, 21:23, כתבת: > unsubscribe > > _ > MSN 8 with e-mail virus protection service: 2 months FREE* > http://join.msn.com/?page=features/virus Talking about AntiVirus and microsoft... I keep receiving mails titled "Last Net Security Update" from "Microsoft Internet Security Department" <[EMAIL PROTECTED]> to "Microsoft Client" <[EMAIL PROTECTED]> does anyone know something about that? can wine apply the security patch :)? -- diego, 29 Elul 5763 Please avoid sending me Word or PowerPoint attachments. See http://www.fsf.org/philosophy/no-word-attachments.html To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
