Re: [Exim] More on ILOVEYOU

Top Page
Delete this message
Reply to this message
Author: James Cronin
Date:  
To: n.g.j.obrien, exim-users
Subject: Re: [Exim] More on ILOVEYOU
Hello,

Thanks Nick.

> Is it pointed out at http://www.datafellows.fi/~descs/love.htm that the
> ILOVEYOU virus will also email all RAS and Windows passwords to
> mailme@??? the next time IE is started
>
> I want to block all outgoing mail to this address - I assume that adding
> something like this to my system filter should cover it:
>
> if $h_to conatins mailme@??? or $repicients contains


For anyone who just cut-and-pasted this, you'll want to correct the
spelling of recipients :)

James.
xx

>   mailme@???
> then
>    fail text "you appear to have a virus on your PC (see \
>    http://www.fsecure.com/v-descs/love.htm).
> endif

>
> I am new to Exim filtering but it looks fine as far as I can see from the
> documentation.
>
>     Rgds.,

>
>         Nick.