[H-GEN] Email filtering

[Harry Phillips]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

David Duffy wrote:
> [ Humbug *General* list - semi-serious discussions about Humbug and     ]
> [ Unix-related topics. Posts from non-subscribed addresses will vanish. ]
> 
> G'day,
> With the current wave of virus emails (Microsoft lookalikes),
> what's the best way to automatically reject/clobber them?
> I guess I could use a procmail rule (tried but failed!) but I'd
> rather reject them in the first place instead of accepting them
> only to drop them later on in the chain. That raises another
> question; if I reject an email using the access file, how much
> of that email makes it onto my system? Just the header?
> David...
> 

There are two things that spring to my mind.

Add to /etc/mail/spammassassin/local.cf

score MICROSOFT_EXECUTABLE 4
score MIME_HTML_NO_CHARSET 1.1

That only does it's job *after* the entire message has been downloaded. 
To filter mail on just the headers there are several programs, one is 
called poppy, another is called 'Save my modem'

Google will find them for you.

-- 
Regards,
Harry Phillips
--- Failure is not an option,
     it comes bundled with your Microsoft product.


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/