Thank you Nigel and Andromeda.. Much appreciated..
Hey Phil, when is the book out!?
Received: from expo.dtk.kiae.su ([144.206.32.10] helo=alpha.ru)
by exim-colo-01.whoc.theplanet.co.uk with esmtp (Exim 3.13 #1)
id 12nNai-0005Yc-00
for exim-users@???; Thu, 04 May 2000 16:31:10 +0100
Received: from ugum.alpha.ru [144.206.32.11]
by alpha.ru with esmtp; Thu, 4 May 2000 19:28:52 +0400
Date: Thu, 4 May 2000 19:28:52 +0400 (MSD)
From: lsu@???
To: Nick O'Brien <n.g.j.obrien@???>
cc: exim-users@???
Subject: Re: [Exim] More on ILOVEYOU
In-Reply-To: <SIMEON.10005041652.H@???>
Message-ID: <Pine.BSF.4.21.0005041927360.38951-100000@???>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: exim-users-admin@???
Errors-To: exim-users-admin@???
X-BeenThere: exim-users@???
X-Mailman-Version: 2.0beta2
Precedence: bulk
List-Id: A user list for the exim MTA <exim-users.exim.org>
Try
if $message_body matches "name=.LOVE-LETTER-FOR-YOU\.TXT\.vbs." or
$message_headers matches "name=.LOVE-LETTER-FOR-YOU\.TXT\.vbs." then
logwrite "$tod_log virus: LOVE from $sender_address $message_id"
fail text "\n\nLOVE LETTER CANCELLED.\n\n"
finish
endif
>>
>
>On Thu, 4 May 2000 16:12:41 +0100 (GMT Daylight Time) Nick O'Brien
><n.g.j.obrien@???> wrote:
>
>> if $h_to conatins mailme@??? or $repicients contains
>> mailme@???
>> then
>> fail text "you appear to have a virus on your PC (see \
>> http://www.fsecure.com/v-descs/love.htm).
>> endif
>
>Apologies my mail client decided to send off my mail before I had double
>checked it :(
>
>I mean something like:
>
>if $h_to contains mailme@??? or $recipients contains
> mailme@???
>then
> fail text "you appear to have a virus on your PC (see \
> http://www.fsecure.com/v-descs/love.htm)."
>endif
>
> Nick
>
>========================================================================
>"Animal? No, worse - human!", Manny - "Runaway Train"
>Nick O'Brien Phone: +44 118 931 8432
>Computer Officer Email: N.G.J.OBrien@???
>Reading University, UK Web: http://www.rdg.ac.uk/~vis98ngo/
>
>
>
>--
>## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##
>
