Re: [Exim] Snow White virus

Top Page
Delete this message
Reply to this message
Author: Dave C.
Date:  
To: Steven A. Reisman
CC: exim-users
Subject: Re: [Exim] Snow White virus
On Fri, 29 Dec 2000, Steven A. Reisman wrote:

> On Fri, Dec 29, 2000 at 06:42:02PM -0500, Dave C. wrote:
>
> > However, checking for the from header something like as follows would
> > throw them away. (This might not be 100% syntactically correct since
> > I'm writing this in a hurry, but the idea is the same)
>
> >  if $h_from contains "hahaha@???" then
> >    seen finish
> >  endif

>
> > > and just block it, is this the best solution?
>
> > > Thanks for your time
>
>
> I use sender_reject_recipients:
>
>     sender_reject_recipients = "lsearch;/etc/exim/sender_reject"

>
> and put hahaha@??? in /etc/exim/sender_reject
>


And this actually catches them? "hahaha@???" isn't actually the
sender address for these messages, the sender is the NULL sender
( "<>" ) and hahaha@??? is just what appears in the
From: header..