On Thu, 4 May 2000, Georg v. Zezschwitz wrote:
> as I've nether worked with Exim Mailfilters so far, as anybody
> a line of filter code ready to drop the "I LOVE YOU"-virus?
This is my first system filter, and I did have trouble with a more
complex condition so settled on
====================================
# Exim filter
#if ($message_body CONTAINS "LOVE-LETTER-FOR-YOU.TXT.vbs" and
# $message_body_size is above 5k) then
# freeze
#endif
if ($h_subject: IS ILOVEYOU) then
freeze text "Suspected ILOVEYOU virus"
endif
====================================
But we are a relatively small site so can deal with false positives.
If others produce better filters, please post.
-j
--
Jeffrey Goldberg +44 (0)1234 750 111 x 2826
Cranfield Computer Centre FAX 751 814
J.Goldberg@??? http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.
