Exim version 3.12 #2 built 21-Dec-1999 16:57:18
Copyright (c) University of Cambridge 1999
My filter currently reads:
------8<-----------------------------------
# Exim Filter
# Quick fix to stop the ILOVEYOU virus spreading too much.
# 04-MAY-2000 Hugh Sasse. Obtained from the Exim list
# thanks to: Richard Leyton <richard@???>
# A more sophisticated version would be better, if it could
# made reliable, which is why this is as it is.
if $h_subject BEGINS "ILOVEYOU" and not error_message
then
fail text "you appear to have a virus on your PC (see:\n\
http://www.fsecure.com/v-descs/love.htm).\n\
Check your system, or rephrase the subject"
endif
# May as well block obvious spam as well.
# 04-MAY-2000 Hugh Sasse
if ($h_to contains "friend@???" or
$h_from contains "friend@???") and not error_message
then
freeze text "spam-like message"
endif
----------------------------------------8<------
Testing gives:
../bin/exim -bF system_filter < test_ILY
Fail text "you appear to have a virus on your PC (see:
http://www.fsecure.com/v-descs/love.htm).
Check your system, or rephrase the subject"
Filter processing ended:
Filtering did not set up a significant delivery.
Normal delivery will occur.
Is that as it should be? I have not got into filters before, but
I didn't expect "Normal delivery will occur".
I get a similar thing for the friend@??? tests (we still get
those from time to time). Should I perhaps put
seen freeze ...
seen fail ...
or is that silly?
I have not made this thing live just yet.
Thank you,
Hugh
hgs@???
