for some reason i used that in my header and body checks and they are still
getting thru... what could i be doing wrong... any ideas ...i entered it
exactly as shown...  thanks

Sheldon
----- Original Message ----- 
From: "Tom Baker|Netsmith Inc" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 05, 2004 7:31 AM
Subject: [IMGate] Re: dealing with w32/bagle (fwd)


> <snip>
> > I am using:
> > /^UEsDBAoAAAAAA/        REJECT Bagel Body
> > /^UEsDBAoAAQAAA/        REJECT E-Bagel Body
> > grep -i "E\-Bagel" /var/log/maillog | wc -l
> >       78
> > And regular:
> > grep "Bagel Body" /var/log/maillog | wc -l
> >      272
>
> > That would include the E-Bagel Body rejects also.  Try "REJECT Bagel
Body"
>
> > instead.
>
>
> man grep
>
> grep -wc "Bagel Body" /var/log/maillog
>
>


Reply via email to