On Sun, 5 Oct 2003, Scott Frederick wrote to TBUDL:
> Could you paste these filters, or instructions on how to set them up in
> the body of a message?
> This is starting to be a problem for me too. Thanks.
I filter them in a different app than TB!, but here is what works well
for me.
Delete message from server if these four conditions are met:
my address not in To header
my address not in Cc header
size is > 140000 bytes
size is < 180000 bytes
I log my kills, and this filter has killed all Swens, with no false
positives that I have seen. The logs are big, so there may be a false
positive in there somewhere, but I don't want to be BCCed huge files
anyway.
Some Swen worm mail that is misformed or has been stripped of its
payload by a server running and AV scanner will get through, but those
are only relatively small, 10-15 KB each.
--
Mike
TB! v1.62r
Hamster Classic v1.3.23.4
Windows XP 5.1.2600 Service Pack 1
________________________________________________
Current version is 2.00.6 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html
