Mailinglist Archive: opensuse-security (457 mails)

< Previous Next >
Re: [suse-security] ID wwywxugwisi... thanks
  • From: Daniel Lord <d_lord@xxxxxx>
  • Date: Wed, 18 Feb 2004 00:51:13 +0100
  • Message-id: <20040217235113.GA17103@xxxxxx>
Hi,

On Tue, Feb 17, 2004 at 11:38:41PM +0100, Sjag Steensma wrote:
> >...
> >fact, I'm rejecting these kinds of attachments on incoming e-mail for a
> >while
> >(so I missed the e-mail starting this thread).
>
> Good, how did you do that?

personally I use this little procmail rule to get rid of this lad.

# get everything exept pgp signatures
:0 HB
* ^Content-Type: application
* !^Content-Type: application/pgp-signature
virus-ml

# another possible rule maybe this one
:0 HB
* ^Content-Disposition.*filename=".*\.(bat|chm|cmd|cnm|com|exe|hta|\
jse?|lnk|pif|reg|scr|shb|shs|vb[esx]|vdx|zip|xls|doc|ppt|ws[fh])"
virus-ml

Greetings Daniel
--
#!/usr/bin/perl
use Fcntl;$s=$ENV{"HOME"}."/.sigs";sysopen(S,"$s",O_RDONLY)||die;
$p[0]=0;while(<S>){$p[$#p+1]=tell if /^$/;}seek(S,$p[int rand($#p\
+.9999)],seek_set)||die;while(<S>){last if /^$/;$z.=$_;}close S;
print"$z";# by Janto Trappe

< Previous Next >