RE: Re: Filtering sobig with postfix

[psz () maths usyd edu au (Paul Szabo)]

> ... use:
>
> /^TVqQAAMAAAAEAAAA\/\/8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAA$/
>    DISCARD Keep your viruses (sobig.f)
>
> Shamelessly stolen from:
> http://sbserv.stahl.bau.tu-bs.de/~hildeb/postfix/postfix_sobigf.shtml

That discards most (but not all!) executables. Discarding all might be a
good thing; beware of those you let through.

Cheers,

Paul Szabo - psz () maths usyd edu au  http://www.maths.usyd.edu.au:8000/u/psz/
School of Mathematics and Statistics  University of Sydney   2006  Australia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html