Re: [xdeqlczsp@advisor.com: Current Internet Security Patch]
Evening, Nick.
"Nick 'TARANTUL' Novikov" <tarantul@yohanga.samba.ru> 18:40 2/10/2003 wrote:
NN> Как такую хрень в exim зафильтровать?
/etc/spamassassin/local/cf:
# swen
header SWENHEADER1 Subject =~ /(new(est)?|latest|last|current)? ?(net(work)?|microsoft|internet)? ?(critical|security)? ?(pack|patch|update|upgrade)/i
describe SWENHEADER1 "Swen worm header"
score SWENHEADER1 +5.5
header SWENHEADER2 Subject =~ /(abort|bug|error|failure)? ?(advice|announcement|letter|message|notice|report)/i
describe SWENHEADER2 "Swen worm header"
score SWENHEADER2 +5.5
body SWENBODY1 /b3IAAABBZG1pbgAAAEdFVCBodHRwOi8vd3cyLmZjZS52dXRici5jei9iaW4vY291bnRlci5naWYv/
describe SWENBODY1 "Swen worm body part"
score SWENBODY1 +5.5
--
Dmitry Astapov //ADEpt
GPG KeyID/fprint: F5D7639D/CA36 E6C4 815D 434D 0498 2B08 7867 4860 F5D7 639D
Reply to: