[H-GEN] Email filtering

[David]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]


 El Jue 25 Sep 2003 10:54 AM, David Duffy escribió:
> [ Humbug *General* list - semi-serious discussions about Humbug and     ]
> [ Unix-related topics. Posts from non-subscribed addresses will vanish. ]
>
> Arjen Lentz wrote:
> >Hi David,
> >
> >On Wed, 2003-09-24 at 18:16, David Duffy wrote:
> >>With the current wave of virus emails (Microsoft lookalikes),
> >>what's the best way to automatically reject/clobber them?
> >>I guess I could use a procmail rule (tried but failed!)
> >
> >Here's a little procmail rule that I found highly effective - that is,
> >it literally caught zillions of mails. I used to track it, but it goes
> >to /dev/null on my main server now because I don't think anyone needs to
> >send me any attachment of those types....
> >I'm not so regex savvy so the pattern may be less than optimal ;-)
> >
> ># Klez, Elkern & co viruses
> ># Basically catch all executable attachments)
> >
> >:0 B
> >
> >* ^Content-Type: .*/.*;$?.*NAME=.*\.(exe|com|bat|pif|scr|lnk)
> >/dev/null
>
> I like that one. Very nifty. Sometimes I send/receive exe files
> but I can always wrap them in a zip file when required.
> I'll send it to /spam for now in case of false positives.
> ".procmailrc here I come!"
> David...

-- 


I'm a bit new at this but would love to filter out some of the junk that's 
coming through. I've been wading through the man pages and while I have a 
.procmailrc it contains only one line (to do with spamassassin that I tried 
to install and configure once upon a time), and there is nothing in /etc that 
relates to procmail that I can see.

How do I
a) determine if procmail is running, and
b) get it to run automatically if it isn't

If I can get that far, I can start messing about with rules, etc. (There are 
some examples in the man pages.) At the moment I feel it's a waste of time 
trying to do anything with rules because I don't even know if procmail is 
running.

I'm pretty confident it's all installed, etc:
[david@ david]$ rpm -qa | grep proc
procps-2.0.7-14mdk
procmail-3.22-3mdk
libxslt-proc-1.0.19-4mdk
[david@ david]$

Thanks for any pointers
David

The trouble with the gene pool is that there are no lifeguards


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/