[H-GEN] Email filtering

[Sandra Milne]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

David Duffy wrote:
> [ Humbug *General* list - semi-serious discussions about Humbug and     ]
> [ Unix-related topics. Posts from non-subscribed addresses will vanish. ]
> 
> G'day,
> With the current wave of virus emails (Microsoft lookalikes),
> what's the best way to automatically reject/clobber them?
> I guess I could use a procmail rule (tried but failed!) but I'd
> rather reject them in the first place instead of accepting them
> only to drop them later on in the chain. That raises another
> question; if I reject an email using the access file, how much
> of that email makes it onto my system? Just the header?
> David...
> 
Personally I don't think you should reject them. The number of 
'returned' rejected emails that still had the virus attached to them 
that I personally have received is ludicrous. If you're going to reject 
or return them, at least strip the virus.

Remember that most of these virus/worm/trojan emails don't actually come 
from the sender in the "From" address line so you'll be foisting these 
emails onto innocent parties.

Sandra.
-- 
fakungabubu at internode.on.net
modesty, n.: Being comfortable that others will discover your greatness.


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/