[Spambayes] Why I added src=cid: etc

Rob W.W. Hooft rob@hooft.net
Tue Nov 5 07:14:16 2002


Matt Sergeant wrote:
[on viruses]
> 
> Yeah, I've got some neat results just from classifying file extensions. 
> The double extension ones are especially good ;-)
> 
> Matt.

2-line virusscanner in /etc/postfix/body_checks:

/^(Content-(Type|Disposition):.*|[[:space:]]*(file)?)name=("[^"]*|[^[:space:]]*)\.(exe|com|scr|pif|bat|lnk|dll|vbs|js)/ 
REJECT
/^Content-Type:[[:space:]]*audio\// REJECT


-- 
Rob W.W. Hooft  ||  rob@hooft.net  ||  http://www.hooft.net/people/rob/