Re: [Exim] More on ILOVEYOU

Top Page
Delete this message
Reply to this message
Author: Hugh Sasse Staff Elec Eng
Date:  
To: Nick O'Brien
CC: EXIM users list
Subject: Re: [Exim] More on ILOVEYOU
On Thu, 4 May 2000, Nick O'Brien wrote:

> I mean something like:
>
> if $h_to contains mailme@??? or $recipients contains
>   mailme@???
> then
>    fail text "you appear to have a virus on your PC (see \
>    http://www.fsecure.com/v-descs/love.htm)."
> endif

>
>     Nick

    [...]

> Computer Officer                    Email: N.G.J.OBrien@???

    [...]
Playing with this one, I find that $recipients doesn't seem to pick
up the address in the CC line, when tested as a system filter (-bF, not
-bf).
With -d9:
    [...]
Testing Exim filter file system_filter
Filter: start of processing
Sub-condition is false: $h_subject BEGINS ILOVEYOU
Condition is false: $h_subject BEGINS ILOVEYOU and not error_message
Sub-condition is false: $h_to contains mailme@???
Sub-condition is false: $recipients contains mailme@???
Condition is false: $h_to contains mailme@??? or $recipients
contains mailme@???
    [...]


I don't understand why that is.

But rewriting has already taken place, so maybe a rewrite rule would
fix this:

mailme@??? bitbucket@???

where you alias that to :blackhole: in your alias file, or just test
$h_cc, $h_bcc as well?

    Hugh
    hgs@???