There is already a working solution http://www.impsec.org/email-tools/procmail-security.html I use it for about 6 month, it works well. ----- Original Message ----- From: "Richard Garand" <[EMAIL PROTECTED]> To: "Jonas Anden" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, December 07, 2001 3:51 AM Subject: Re: Procmail virus filtering
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On December 6, 2001 01:11 am, Jonas Anden wrote: > > Try this for a rule: > > :0 B : > > > > * name=go ne\.scr" > > /var/spool/infectedmail > > Thanks to all the replies, I can now filter out the virus, but now every > email that discusses that pattern goes into the infected mail file. Can I > count on certain other parts of the MIME boundary line that patter is on to > be there all the time? Which parts are essential for it to be seen as an > attachment? > - -- > Richard Garand - r i c h a r d @ g a r a n d n e t . n e t > (L)ICQ: 12190132 - http://www.garandnet.net > "...systems wrongly configured with Microsoft SQL Server software..." -- ZDNet > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: For info see http://www.gnupg.org > > iD8DBQE8EBKkjuZKnjxs0fMRAgLqAJ49KDYGAILVGR8vtFAGmSPGkKmdXACgmnbE > dHYW8mF6ly6ERcewo2TGYFc= > =cRvG > -----END PGP SIGNATURE----- > >
