Full Disclosure mailing list archives
procmail
From: christopher neitzert <chris () neitzert com>
Date: Tue, 27 Jan 2004 13:32:42 -0800
one would assume that everyone here knows procmail, but just in case.
add this line to your .procmailrc and you shouldnt see any of this
mydoom tripe.
--
:0 B:
* $
content-[^:]+:${WS}*.+(\<)*(file)?name${WS}*=${WS}*\/.+\.(pif|scr|exe|zip)\"?$
$WHATEVER
--snip--
$WHATEVER could be ${HOME}/Mail/Viruses or /dev/null
take your pick.
remote the |zip if you actualy want to receive .zip files.
For now I'm asking everyone who sends me a .zip legitimately to rename
it to .gz before sending.
love
chris
cat $FLAMES > /dev/audio before sending
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- procmail christopher neitzert (Jan 27)
