Re: Sircam defense

[Gary <medmanks@earthling.com>]

On Tue, Sep 18, 2001 at 12:55:45PM -0500 or thereabouts, Danny Sauer wrote:
> On Mon, Sep 17, 2001 at 02:42:05PM -0700, Robert Threet wrote:
> > Uh...  someone is complaining that a user is infected with
> > the Sircam virus.  I kinda thought that was a client issue.
> >  Is there anything you can do with Sendmail?
> 
> <suggestion serious="not">
> 	You could block all messages containing the words "file"
> 	or "advice" using procmail called from sendmail, or block
> 	all messages that have non-text components.
> </suggestion>
> 
> Actually, wasn't a procmail rule that covered the sircam-style
> messages posted a few weeks ago?  I'd check the archives, but
> I'm clearly very busy (as evidenced by my posting to the luci
> board when I should be working).

Yes, I posted the procmail recipe.  Let me know if anyone wants it
again, and I will do so.


-- 
Best regards,
Gary             

-
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.