Author: Christoph Kliemt Date: To: exim-users Subject: Re: [Exim] Blocking phony MS Security update emails
Jeff Lasman <blists@???> writes:
> We're being hit by MS security update emails. They're not spam, but
> rather more accurately described as virii or worms.
>
> Does anyone has a good rule that will block these? I know we'll have to
> do it at "data" time, but I guess that's better than not blocking them
> at all.
get exiscan and block all emails that contain executables.
