Re: [Exim] New Email Virus...

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Jim Tittsler
Ημερομηνία:  
Προς: Jeff Carnahan
Υ/ο: exim-users
Αντικείμενο: Re: [Exim] New Email Virus...
On Tue, Jul 18, 2000 at 06:35:18PM -0700, Jeff Carnahan wrote:
> Does anyone have more details on this, or perhaps a filter for this type of
> virus?


J C Lawrence has posted a copy of the BUGTRAQ advisory.

I've added a simple filter stanza that attempts to freeze messages with
abnormally long Date: headers (rather than trying to check for extra space
preceeding the GMT section specifically):

if ${length_40:$header_date:} is not $header_date: then
freeze text "message has a suspiciously long Date: header"
endif


-- 
Jim Tittsler, Tokyo
Python Starship     http://starship.python.net/crew/jwt/