On Wed, 28 Jan 2004, Vortex Bacolod wrote:
..
> Any Postfix gurus here? I need help guys. My mail server keeps on
> receiving mails with subject HELLO, Test, Status, hello, and etc. Now, I
> wan to block those incoming mails with these subject. Some have even a
> zip file attachments. I think this is the MyDoom virus that is spreading
> around. How do i do that? I'm using RH 7.3.

header_checks is no good (too generic subject). the following body_checks 
work well for me:

# W32Doom/Novarg hack
/^UEsDBAoAAAAAA/        DISCARD
/^TVqQAAMAAAAEAAAA/     DISCARD


---
Orlando Andico <[EMAIL PROTECTED]>
Mosaic Communications, Inc.

--
Philippine Linux Users' Group (PLUG) Mailing List
[EMAIL PROTECTED] (#PLUG @ irc.free.net.ph)
Official Website: http://plug.linux.org.ph
Searchable Archives: http://marc.free.net.ph
.
To leave, go to http://lists.q-linux.com/mailman/listinfo/plug
.
Are you a Linux newbie? To join the newbie list, go to
http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie

Reply via email to