On Thu, 2004-01-29 at 13:14, Orlando Andico wrote: > On Wed, 28 Jan 2004, Vortex Bacolod wrote: > .. > > Any Postfix gurus here? I need help guys. My mail server keeps on > > receiving mails with subject HELLO, Test, Status, hello, and etc. Now, I > > wan to block those incoming mails with these subject. Some have even a > > zip file attachments. I think this is the MyDoom virus that is spreading > > around. How do i do that? I'm using RH 7.3. > > header_checks is no good (too generic subject). the following body_checks > work well for me: > > # W32Doom/Novarg hack > /^UEsDBAoAAAAAA/ DISCARD > /^TVqQAAMAAAAEAAAA/ DISCARD
I've tried that regexp body checks, but the /^UEsDBAoAAAAAA/ won't allow valid users to send zip attachment. I guess amavis-new+(any antivirus) is the best solution on this but this makes your postfix server consumes 100% resource of cpu and memory. br -- Jimmy B. Lim IT Operation & Support Team Leader Tricom -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
