Hi Folks,

Thanks for your suggestions for filtering out possible viral messages.

I'm going to try Martin's procmailrecipie to start with as I already use
(and am trying to learn) Procmail.

Thanks also to William and Andrew for the links, I really liked LinuxBrit
Website - lots of good info on there.

Thanks again,

Mike
----- Original Message -----
From: "Martin McCarthy" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 20, 2002 11:57 AM
Subject: Re: [scottish] Procmail Recipie needed


> > Does any one have a procmail recipie to filter out Emails with
attatchments?
> >
> > I would like to send any mail with possible virus content to /dev/null ,
any
> > .exe .shs .pif .vbs and anything with a double extension (*.txt.vbs).
>
> This might do the job for you:
>
>   :0:
>   * 9876543210^0 ^Content-[-a-z0-9_]+:.*="?[^"]*\.(vb[se]|ws[fh]|hta|shs|\
>                   pif|(doc|txt|xls)\.)
>   * 9876543210^0 B ?? ^Content-[-a-z0-9_]+:.*($[         ].*)*=[    ]*\
>                        ($[   ]+)*"?[^"]*\.(vb[se]|ws[fh]|hta|shs|pif|\
>                        (doc|txt|xls)\.)
>   virusfilter
>
> The square brackets with whitespace between contain one space and one
> tab!
>
> Best to redirect to a mailbox that you can check and regularly empty,
> rather than /dev/null, so that you can recover from getting it wrong!!
>
> Martin
> --
> Martin McCarthy                 /</    http://procmail.non-prophet.org
>     `Procmail Companion'        \>\
>      Addison Wesley             /</                  PGP key available
> --------------------------------------------------------------------
> http://www.lug.org.uk                   http://www.linuxportal.co.uk
> http://www.linuxjob.co.uk               http://www.linuxshop.co.uk
> --------------------------------------------------------------------
>

--------------------------------------------------------------------
http://www.lug.org.uk                   http://www.linuxportal.co.uk
http://www.linuxjob.co.uk               http://www.linuxshop.co.uk
--------------------------------------------------------------------

Reply via email to