Re: speedy spam
On (18/10/03 20:17), David Crane wrote:
> On Tuesday 14 October 2003 06:56 am, Clive Menzies wrote:
> > I was finding it virtually impossible to work because of the
> > volume of these MS Swen virus emails. So I installed mailfilter
> > (woody) and fetchmail, set up my mailfilterrc as per the attached
> > sample and invoke mailfilter from fetchmail using
> > preconnect="mailfilter".
>
> Using mailfilter is great for deleting these damn 150K e-mails
> at the POP3 server, avoiding the modem download time.
>
> I started with Clive's .mailfilterrc, and have been adding to it when
> another Swen slips through. The most important change was to
> change the From to (FROM|From). Plus a few other addresses.
>
> Here are my deny lines, which you could add into Clive's full
> .mailfilterrc file.
>
> DENY=^(From|FROM):.*Customer Bulletin
> DENY=^(From|FROM):.*(Inet|Internet) (Mail|Email|Service|System|Message).*
> DENY=^(From|FROM):.*Security Department
> DENY=^(From|FROM):.*(Email|Mail|Net|Message|Network) (Delivery|Service).*
> DENY=^(From|FROM):.*microsoft (network|internet).* (service|system).*
> DENY=^(From|FROM):.*Technical (Assistance|Support).*
Thanks for the update David.
I notice that you removed the Escape Character "\" and when I did a
global search and replace: %s / From/\(From\|FROM\)/g gvim also removed
my "\"s. Can anyone explain to me why? Is it that mailfilter uses
different syntax. I'm trying to get my head around Regex but find this
a bit confusing.
Regards
Clive
--
http://www.clivemenzies.co.uk
strategies for business
Reply to: