Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Create a Mail rule to block the w32.sobig.f spam worm' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Create a Mail rule to block the w32.sobig.f spam worm
Authored by: EbeX on Aug 20, '03 01:49:44PM

Really? Delete all emails ending in "Approved"? What about my online loan application? Seriously, that seems like on overreaching mail rule. Although I must admit, I don't have a better solution.



[ Reply to This | # ]
Create a Mail rule to block the w32.sobig.f spam worm
Authored by: seb2 on Aug 20, '03 08:13:03PM

Well, for one thing, you could do the following:

Add an extra rule for "Approved", and set it to "when all conditions are met".
When editing the rule, add a new criterion, in the popup menu on the left, click on "Edit Header List" and manually add the two following headers: "X-Mailer" and "Content-Type". Then add the two criteria '"X-Mailer" contains "Outlook"' and '"Content-Type" contains "multipart/mixed"', that will filter out messages sent by outlook that contain an attachment (or are HTML).



[ Reply to This | # ]