Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Create a Sendmail rule to block the w32.sobig.f spam worm' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Create a Sendmail rule to block the w32.sobig.f spam worm
Authored by: Trunkmonkey on Aug 21, '03 05:22:19PM

And, for you Sendmail geeks:

HSubject:	$>Check_Subject
D{MMsg}Possible virus detected.  Email rejected due to a Subject: that viruses commonly use.  Please change your Subject: and re-send.  Thank you.
SCheck_Subject

R$* ILOVEYOU $*					$#error $: "550 ${MMsg}"
RA funny game $*				$#error $: "550 ${MMsg}"
RA special nice game $*				$#error $: "550 ${MMsg}"
RHappy Allhallowmas $*				$#error $: "550 ${MMsg}"
RHave a good Allhallowmas $*			$#error $: "550 ${MMsg}"
RW32 . Klez . E removal tools $*		$#error $: "550 ${MMsg}"
RRe : Approved					$#error $: "550 ${MMsg}"
RRe : Details					$#error $: "550 ${MMsg}"
RRe : Re : My details				$#error $: "550 ${MMsg}"
RRe : Thank you !				$#error $: "550 ${MMsg}"
RRe : That movie				$#error $: "550 ${MMsg}"
RRe : Wicked screensaver			$#error $: "550 ${MMsg}"
RRe : Your application				$#error $: "550 ${MMsg}"
RThank you !					$#error $: "550 ${MMsg}"
RYour details					$#error $: "550 ${MMsg}"


[ Reply to This | # ]
Create a Sendmail rule to block the w32.sobig.f spam worm
Authored by: leebennett on Aug 21, '03 08:15:00PM
You don't need all these rule conditions. I've described here that you only need to set a rule to look for the bogus header, X-MailScanner: Found to be clean. Then, just set its action to delete the message.

[ Reply to This | # ]