Re: [Exim] More windows viruses

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Ian A B Eiloart
Datum:  
To: Exim users list
Betreff: Re: [Exim] More windows viruses

--On Friday, March 19, 2004 11:11 am +0000 "Alan J. Flavell"
<a.flavell@???> wrote:

>
> On Fri, 19 Mar 2004, Ian A B Eiloart wrote:
>
>> >   deny    condition = ${if match{$h_X-Priority:}{3}{yes}{no}}
>> >       condition = ${if match{$message_body}{<OBJECT
>> >       STYLE=\"display:none\" *\
>> >               DATA=\"http:\/\/[0-9\.]+:81\/[0-9]+\.php\">} {yes} {no}}

>>
>> Is that right?
>
> Looks fine to me.
>
>> Isn't this going to look for an IP address with a trailing dot,
>
> No.
>
> There's a pcretest utility. Might one suggest you use it before
> posting about regexes?
>


OK, thanks. I wasn't aware of that - I'll take a look.

The more imoportant point, though, is that the bagle virus may use other
ports. Another post suggested that sometimes no port is specified.


--
Ian Eiloart
Servers Team
Sussex University ITS