Re: [Mailman-Developers] [scr] Worm Klez.E immunity
"Dan" == Dan Mick dmick@utopia.West.Sun.COM writes:
Dan> Fabulous. This goes to my mailing list, apparently from Dan> Barry. Dan> F***ing virus writers. I want them strung up by and with Dan> their privates.
Well, in the last 48 hours on the xemacs lists, spam "from" rms@gnu.org, clerik@naggum.no, acs@xemacs.org (XEmacs Review Board member), ben@666.com (ditto), and me has arrived at xemacs.org ... and been sent to the bit bucket by procmail:
# Use of $ to match newline is a special procmail extension. # The idiom (.*$[ ])* should match across RFC 822 folded lines. # Note that the character class is {SPC,TAB}, procmail doesn't grok \t? :0
- ^content-type:.*multipart
- B ?? ^content-(type|disposition|description):(.*$[ ])*
.*name=.*(\.(exe|pif|bat|scr|doc|asp|wab|xls|mpe?g|mp3|rtf)
|\[[0-9][0-9]*\].*\.htm?l[^"]) xemacs-spam/executable-includedNo false positives, and once I got the folded lines part right no Klez to the lists, either. (Boy, procmail is painful.)
amen.
Thanks for the tip, although I still say if we strung more of 'em up by their privates, we'd have less innocent-punishing like this. But of course having a solution is much more pragmatic.
participants (1)
-
Dan Mick