Sendmail & the virus...

From: R Carsey <rcarsey_at_monmouth.edu>
Date: Thu, 04 May 2000 21:29:12 -0400

Although not specific to Tru64, a lot may benefit from this.

Tru64 v5.0 shipped with Sendmail v8.8.8, so you would have to upgrade to
8.9.3 or higher for this to work (prior versions did not support header
checking). Add this to your sendmail.cf file.

I put this right before the SBasic_check_rcpt line:

# added by rcarsey may 4, 2000
HSubject: $>CheckSubject
SCheckSubject
R$*{inserttabhere}$:<$1>
R <iloveyou>{inserttabhere}$:[VIRUS]
R <fwd: joke>{inserttabhere}$:[VIRUS]
R [VIRUS]{insert tab here}$#error $: 570 Probable viral email rejected
R$*{inserttabhere}$#OK

This will deny any mail with a subject of _exactly_ (non case sensitive)
"ILOVEYOU" and "FWD: JOKE" with a 570 errorcode. Apparently somebody
got cute and changed the VBA macro so that there was a different subject
(so says a report on AOL's portal site)

--Rob

ps. I'm _not_ a sendmail expert. Make sure you replace {inserttabhere}
with an actual TAB
Received on Fri May 05 2000 - 01:29:59 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:40 NZDT