|
Hi All,
I have an email that didn't hit on anything. It had one sentence "Please
read the attached file (Dkaufman.zip)." And of course a zip virus attached. The
from is [EMAIL PROTECTED] with a
message ID from Hotmail... I would assume that something should have hit. I have
aggressively high scoring/rules so I have -5 to allow personal email to come
thru.
Does anyone have a way to block this email? (Header below)
Is there a way to score zip attachments or score attachment by file size ie
<50K?
Thanks for any help!!
--Bryan
Received: from jonas.corp.good-sam.com
by gwmail3.corp.good-sam.com; Wed, 19 May 2004 03:31:19 -0500 Received: from relay2.good-sam.com ([127.0.0.1]) by jonas.corp.good-sam.com (Netscape Messaging Server 4.15) with ESMTP id HXYD0700.448 for <[EMAIL PROTECTED]>; Wed, 19 May 2004 03:31:19 -0500 Received: from localhost (unknown [127.0.0.1]) by relay2.good-sam.com (Postfix) with ESMTP id AB71D19750B for <[EMAIL PROTECTED]>; Wed, 19 May 2004 03:29:03 -0500 (CDT) Received: from 66.108.221.187 (66-108-221-187.nyc.rr.com [66.108.221.187]) by relay2.good-sam.com (Postfix) with SMTP id 1308219750C for <[EMAIL PROTECTED]>; Wed, 19 May 2004 03:28:59 -0500 (CDT) Received: from 144.252.172.207 by ; Wed, 19 May 2004 08:39:02 -0100 Message-ID: <[EMAIL PROTECTED]> From: "Lindsey Sorensen" <[EMAIL PROTECTED]> Reply-To: "Lindsey Sorensen" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: Your archive (#6327425647) Date: Wed, 19 May 2004 15:32:02 +0600 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--538600812321778" X-IP: 50.112.91.82 X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on relay2.corp.good-sam.com X-Spam-Level: X-Spam-Status: No, hits=-5.0 required=6.8 tests=gss_rules_allow_earthlink autolearn=no version=2.60 ----538600812321778
Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable Please read the attached file (Dkaufman.zip).
----538600812321778
Content-Type: application/x-zip-compressed; name="Dkafman.zip" Content-transfer-encoding: base64 Content-Disposition: attachment; filename="Dkafman.zip" |
------------------------------------------------- This email transmission and any documents, files or previous
email messages attached to it may contain information that is confidential or legally privileged. If you are not the intended recipient, you are hereby notified that any disclosure, copying, printing, distributing or use of this transmission is strictly prohibited. If you have received this transmission in error, please immediately notify the sender by telephone or return email and delete the original transmission and its attachments without reading or saving in any manner. The Evangelical Lutheran Good Samaritan Society. ---------------------------------------------------------
