Re: [Exim] Blocking phony MS Security update emails

Jeff Lasman <blists@???> writes:

> We're being hit by MS security update emails. They're not spam, but
> rather more accurately described as virii or worms.
>
> Does anyone has a good rule that will block these? I know we'll have to
> do it at "data" time, but I guess that's better than not blocking them
> at all.

get exiscan and block all emails that contain executables.

http://duncanthrax.net/exiscan/

\\// christoph