Title: MyDoom E-mail
If you do use procmail, you can use virus.email to send a message as a bounce back. :)



On Mon, 2004-02-09 at 15:03, Wess Bechard wrote:
Yeah, I call it procmail.  :)


Here is my procmail recipe for catching extensions.  Maybe this will work for you?


# File extentions to be blocked by procmail:
ext='(vbj|exe|com|bat|vbs|cmd|pif|scr|js|zip)'

# This recipe should stop the attachments from the clients.
:0 BHbh
* !^FROM_DAEMON
* !^X-Loop:
[EMAIL PROTECTED]
* $ content-[^:]+:${WS}*.+(\<)*(file)?name${WS}*=\"*\/.+\.$ext\"?$
{
        :0 hb
        | (formail -r -i"From: [EMAIL PROTECTED]" -I"Precedence: junk" -A"X-Loop: [EMAIL PROTECTED]" ; cat /etc/procmailrcs/virus.email) | $SENDMAIL -t

        :0 A
        /dev/null
}



On Mon, 2004-02-09 at 14:57, Mark A. DeMichele wrote:
Has anyone written a rule that catches the MyDoom virus e-mails.

Thanks,

Mark DeMichele
Wess Bechard
Technical Support
eliquidMEDIA
International Inc.

[EMAIL PROTECTED]
519.973.1930 -1.800.561.7525
Wess Bechard
Technical Support
eliquidMEDIA
International Inc.

[EMAIL PROTECTED]
519.973.1930 -1.800.561.7525


Reply via email to