Re: [EXIM] Happy99 Filtering Rules

Top Page
Delete this message
Reply to this message
Author: Nigel Metheringham
Date:  
To: Ashley Kleynhans
CC: exim-users
Subject: Re: [EXIM] Happy99 Filtering Rules

ashleyk@??? said:
> Thanks to everyone who assisted me with getting the mail filter up and
> running. It is working correctly for Melissa but not for HAPPY99.EXE.
> Does anyone have a set of filtering rules for HAPPY99 for me please?


    #
    # check for Happy99.exe email worm
    # this always has a "X-spanska: Yes" header
    #
    if $h_x-spanska: contains "yes"
    then
        fail text "Message appears to contain Win32/Ska.A virus - see 
http://www.datafellows.com/v-descs/ska.htm for details"
    endif


     Nigel.
-- 
[ Nigel Metheringham                  Nigel.Metheringham@??? ]
[ Phone: +44 1423 850000                         Fax +44 1423 858866 ]




--
*** Exim information can be found at http://www.exim.org/ ***