> I normally use exim global-filters to filter out common viruses.
>
> e.g.
> if ($message_body CONTAINS "filename=\"LOVE-LETTER-FOR-YOU.TXT.vbs\"" and
> $message_body_size is above 5k)
> then
> fail text "This message appears to contain the ILOVEYOU virus! (see \
> http://www.fsecure.com/v-descs/love.htm).\n"
> endif
>
>
> Does anyone have a similar filter for the Bugbear/B virus:
> http://vil.mcafee.com/dispVirus.asp?virus_k=100358
Basically, any message that happens to say
'filename="LOVE-LETTER-FOR-YOU.TXT.vbs"' is a virus. I used to do things
like this and I didn't like it and had too many complaints. FYI, it won't
catch it if they do filename=LOVE-LETTER-FOR-YOU.TXT.vbs (no quotes)
