En Wed, Feb 28, 2001 at 03:46:28PM +0800, Juan Miguel Cacho escribio:
#_ I have been receiving this e-mail for the past couple of weeks now. But I
#_ keep getting one with a file attachment: "sexy virgin.scr". I upgraded to
#_ postfix snapshot-20010222 and now use the body_checks. In fact while
#_ fetching my mail 10 minutes ago a message was rejected by my postfix, it's
#_ size was too small to contain the virus ergo the subject matched my regexp
#_ exactly. Unfortunately the subject does not appear in my /var/log/mail.log
#_ so I don't know who's message that was.
I found it.
-----<snipped from /var/log/mail.log>-----
> bombastar.jmc.com[127.0.0.1]: 250 Ok
watchdog_pat: 0x8074da0
< bombastar.jmc.com[127.0.0.1]: DATA
> bombastar.jmc.com[127.0.0.1]: 354 End data with <CR><LF>.<CR><LF>
0264C1E322B: message-id=<[EMAIL PROTECTED]>
0264C1E322B: reject: body Subject: Snowhite and the Seven Dwarfs - The REAL story!M;
from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]>
mail_scan_any: read integer: 8
> bombastar.jmc.com[127.0.0.1]: 552 Error: content rejected
watchdog_pat: 0x8074da0
< bombastar.jmc.com[127.0.0.1]: RSET
> bombastar.jmc.com[127.0.0.1]: 250 Ok
watchdog_pat: 0x8074da0
< bombastar.jmc.com[127.0.0.1]: MAIL FROM:<[EMAIL PROTECTED]> BODY=7BIT
SIZE=3391
extract_addr: input: <[EMAIL PROTECTED]>
extract_addr: result: [EMAIL PROTECTED]
connect to subsystem private/cleanup
-----<end snipped from /var/log/mail.log>-----
Yup just as I thought, the subjext is an EXACT match, including the space
dash space between "Dwarfs" and "The".
Grabe, nakakaduling magbasa ng mail.log!!
--
Juan Miguel Cacho [EMAIL PROTECTED] ®
Philippines [EMAIL PROTECTED]
...the poor count their blessings, the affluent count their calories.
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
