[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: speedy spam

On (18/10/03 20:17), David Crane wrote:
> On Tuesday 14 October 2003 06:56 am, Clive Menzies wrote:
> > I was finding it virtually impossible to work because of the
> > volume of these MS Swen virus emails.  So I installed mailfilter
> > (woody) and fetchmail, set up my mailfilterrc as per the attached
> > sample and invoke mailfilter from fetchmail using
> > preconnect="mailfilter".  
> Using mailfilter is great for deleting these damn 150K e-mails
> at the POP3 server, avoiding the modem download time.
> I started with Clive's .mailfilterrc, and have been adding to it when 
> another Swen slips through.  The most important change was to 
> change the From to (FROM|From).  Plus a few other addresses.
> Here are my deny lines, which you could add into Clive's full
> .mailfilterrc file.
> DENY=^(From|FROM):.*Customer Bulletin
> DENY=^(From|FROM):.*(Inet|Internet) (Mail|Email|Service|System|Message).*
> DENY=^(From|FROM):.*Security Department
> DENY=^(From|FROM):.*(Email|Mail|Net|Message|Network) (Delivery|Service).*
> DENY=^(From|FROM):.*microsoft (network|internet).* (service|system).*
> DENY=^(From|FROM):.*Technical (Assistance|Support).*
Thanks for the update David.

I notice that you removed the Escape Character "\" and when I did a
global search and replace: %s / From/\(From\|FROM\)/g gvim also removed
my "\"s.  Can anyone explain to me why?  Is it that mailfilter uses
different syntax.  I'm trying to get my head around Regex but find this
a bit confusing.



strategies for business

Reply to: