Re: hack for filtering "i love you" worm

[Neil Schemenauer]

On Fri, May 05, 2000 at 12:19:09PM +0200, octave klaba wrote:
> Hi,
> I did setup your qmail-filter.py and test works
> # echo "test 1" | mail -s okay myself
> # echo "test 2" | mail -s ILOVEYOU myself
> qmail-inject: fatal: mail server permanently rejected message (#5.3.0)
> # echo "test 2" | mail -s ILOVEYOU [EMAIL PROTECTED]
> qmail-inject: fatal: mail server permanently rejected message (#5.3.0)

Nothing is wrong with those tests.

> but when I send an email thought eudora using smtp of this serveur or not
> to a pop on this serveur, email is not rejected.

Are you sure you have the Subject right?  It should be:

    "Subject: ILOVEYOU\r\n"

Try:

    $ telnet localhost 25
    220 example.com ESMTP
    mail <me>
    250 ok
    rcpt <me>
    250 ok
    data
    354 go ahead
    Subject: ILOVEYOU^M
    ^M
    .
    250 ok 957554771 qp 1623
    quit
    
Where you see ^M type "Control-v Enter".

> PS I restarted all

Not necessary.

    Neil

-- 
Real programmers don't make mistrakes