Hi, this little plugin filters the mails generated by the Sober.G worm. The main reason why it works (worksforme[tm] ;->) is the fsck'd up Message-ID header: qmails Message-IDs always match /^<[EMAIL PROTECTED]>$/ See qmail-1.03/newfield.c, line 26 ff. Maybe some other (spam) mails will be denied too, but none with a regular qmail Message-ID.
Oh.. I don't check the body for a microsoft executable because of the latest modification (for german speaking users: see http://www.heise.de/newsticker/meldung/48135 ) Hanno
sober_filter
Description: Binary data
