Matching From: addresses sucks, but I don't yet know of a better way to catch these. So I've added the following regexes to the mailman filter.
from:.*interscan.* from:.*anti.*virus from:.*virus.*alert -----Forwarded Message----- From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [SLUG] Virus Alert Date: Wed, 28 Jan 2004 01:00:10 +0100 The mail message (file: chaskyk.zip) you sent to <[EMAIL PROTECTED]> contains a virus. (on smtp1av.net) -- Pete -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
