Re: [Exim] MyDoom filtering?

Páxina inicial
Borrar esta mensaxe
Responder a esta mensaxe
Autor: Darren Casey
Data:  
Para: exim-users
Asunto: Re: [Exim] MyDoom filtering?
> On Tue, 2004-01-27 at 09:42 -0600, CJ Kucera wrote:
> > Hello, list...
> >
> > I was wondering if anyone happens to have an acl or the like which
> > can be used to filter out MyDoom messages? Thanks...
>
> This fragment of the DATA ACL seemed to catch them for me:
>
>   # Deny messages without Message-ID, but allow bounces.
>   deny  !senders = :
>         condition = ${if !def:h_Message-ID: {1}}
>         message = RFC2822 says you SHOULD have a Message-ID.\n\
>                   Most messages without it are spam, so your mail has been

rejected.
>


This has the side effect of blocking a LOT of genuine mail, esp notes
servers + quite a few other systems

Shame so much is broken!

Darren