Full Disclosure mailing list archives

procmail


From: christopher neitzert <chris () neitzert com>
Date: Tue, 27 Jan 2004 13:32:42 -0800

one would assume that everyone here knows procmail, but just in case.

add this line to your .procmailrc and you shouldnt see any of this
mydoom tripe.
--
:0 B:
* $
content-[^:]+:${WS}*.+(\<)*(file)?name${WS}*=${WS}*\/.+\.(pif|scr|exe|zip)\"?$
$WHATEVER
--snip--

$WHATEVER could be ${HOME}/Mail/Viruses or /dev/null
take your pick.

remote the |zip if you actualy want to receive .zip files.

For now I'm asking everyone who sends me a .zip legitimately to rename
it to .gz before sending.

love 

chris

cat $FLAMES > /dev/audio before sending




Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: