Re: KMail filter on attachments? (How to filter windows viruses.)

[Matej Cepl <cepl@surfbest.net>]

On Saturday 10 of January 2004 18:17, Anders Andersen wrote:
> Windows virus spam never has your email address in the actual
> to: header field, but real people sending you attachments
> almost always have. So you simply download all "real mail" and
> nuke everything else.  Now if people cc/bcc you, this will
> unfortunately kill all those. I find this to be acceptable.

I wouldn't like to be your friend :-). No really, nuking all
Cc:'ed and Bcc:'ed emails (how do you work with lists?) is really
solution worse than the problem. I am sure you have no viruses,
but not many friends either, don't you? :-)

Get SA (or bogofilter) and be happy. If you really don't want to
have all viruses downloaded, then for me this imapfilter rule
(which should be reproducable in KMail filters) makes life much
easier (of course, you have to check that you have no friends
in the Black Land):

   filter korejci or
      mask header Content-Type euc-kr
      mask header Content-Type gb2312
      mask header Content-Type big5
      mask header Content-Type ks_c_5601-1987
      mask header Content-Type iso-2022-jp
      mask subject ScanMail
   action delete

   filter spam or
      mask From microsoft.com
      mask From Microsoft
      mask From ms.net
      mask Subject "Critical Update"
      mask Subject "Virus Alert"
      mask Subject "Current Microsoft Security Patch"
      mask header X-Spam-Level "****"
   action move Junk

Enjoy!

   Matej

-- 
Matej Cepl, http://www.ceplovi.cz/matej
GPG Finger: 89EF 4BC6 288A BF43 1BAB  25C3 E09F EF25 D964 84AC
138 Highland Ave. #10, Somerville, Ma 02143, (617) 623-1488
 
He has never been known to use a word that might send a reader to
the dictionary.
      -- William Faulkner
         (about Ernest Hemingway)