Re: Sieve script to filter today's MS annoyances

[Andy Firman <list@firman.us>]

On Fri, Sep 19, 2003 at 01:04:44PM -0400, Alfredo Valles wrote:
> I'm receiving more and more emails with M$ trojan crap. 
> I want to get ride of them, but the problem is that I download my emails from 
> a pop3 server that I don't configure. 
> My question is:  Is there a mail client that aloud me to use SpamAssassin or 
> any other tool to effectively filter all this shit.

Put this in your .forward file and utilize the Exim filters.
You can make fetchmail get your pop3 mail and deliver to Exim.
I got this from another list and have tested it.  Works great!
Here is the site it came from with other cool Exim filters:
http://pkierski.republika.pl/filtry.shtml


----------------------
# Exim filter

########
# Swen Virus #
########

if $h_content-type contains "multipart/alternative;" and
   $h_content-type matches "boundary=.[a-z]{6}" and
   $message_body matches "iframe src=3D.cid:.*height=3D0.* width=3D0.*/iframe"
then
   logfile $home/filter.log 0644
   logwrite "$tod_log - filter: *** Swen.2 *** - sender: $sender_address - subject: $h_subject: - id: 
$message_id"
   seen finish
endif

########
# Swen Virus #
########

if $h_content-type matches "multipart/mixed; boundary=.[a-z]{6}" and
   $message_body matches "September 200[23], Cumulative Patch"
then
   logfile $home/filter.log 0644
   logwrite "$tod_log - filter: *** Swen.1 *** - sender: $sender_address - subject: $h_subject: - id: 
$message_id"
   seen finish
endif
--------------------

Hope this helps.

-Andy