Re: [Exim] Blocking phony MS Security update emails

Top Page

Reply to this message
Author: Christoph Kliemt
Date:  
To: exim-users
Subject: Re: [Exim] Blocking phony MS Security update emails
Jeff Lasman <blists@???> writes:

> We're being hit by MS security update emails. They're not spam, but
> rather more accurately described as virii or worms.
>
> Does anyone has a good rule that will block these? I know we'll have to
> do it at "data" time, but I guess that's better than not blocking them
> at all.


get exiscan and block all emails that contain executables.

http://duncanthrax.net/exiscan/

\\// christoph