James Gregory wrote:
> (unless bogofilter is
learning PE exe headers or something).

I don't know about procmail, but you can use these regexps to match PE headers:
/^TV[nopqr]....[AB]..A.A....*AAAA...*AAAA/ REJECT
/^M35[GHIJK].`..`..*````/ REJECT


taken from my body_checks regexp compiled from various sources...

dave


-- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to