Very Computer

Like you I got swamped with swen virus's last week. Theres nothing you can
do but shut down the email account, create a new one and never use it for
newsgroups. Post with a bogus email instead. it means that no-one can
contact you outside the group, but thanks to the lowlifes who this writing
something like swen impresses anyone bar themselves, there is nothing else
we can do.

cio
Derek.

No.  You can install e.g. spamassassin and redirect all the sven to
/dev/null before it hits your inbox.

--

I was running SA at home and it wasn't catching these guys!  Would you mind
posting any addition rules you used to catch them?

In your spamassassin rc file

   score MICROSOFT_EXECUTABLE 6.0

which will cause SpamAssassin to classify as spam (IIRC "Xspam: YES") any
email that contains one or more attachment that is executable in a Microsoft
environment. From there, you just filter based on the "YES" judgement.

--

Lew Pitcher, IT Consultant, Application Architecture
Enterprise Technology Solutions, TD Bank Financial Group

(Opinions expressed here are my own, not my employer's)

<snip>

Quote:

> > I was running SA at home and it wasn't catching these guys!  Would you
mind
> > posting any addition rules you used to catch them?

> In your spamassassin rc file

>    score MICROSOFT_EXECUTABLE 6.0

> which will cause SpamAssassin to classify as spam (IIRC "Xspam: YES") any
> email that contains one or more attachment that is executable in a
Microsoft
> environment. From there, you just filter based on the "YES" judgement.

> --

> Lew Pitcher, IT Consultant, Application Architecture
> Enterprise Technology Solutions, TD Bank Financial Group

> (Opinions expressed here are my own, not my employer's)

Much thanks!  I'm using SA but haven't had time to even read the scripting
rules, much less start playing with them... I'll drop this in tonight.

Likely, your ~/.spamassassin/user_prefs file

Quote:>   score MICROSOFT_EXECUTABLE 6.0

> which will cause SpamAssassin to classify as spam (IIRC "Xspam: YES")

Actually,
   X-Spam-Flag: YES

Quote:> any email that contains one or more attachment that is executable in a
> Microsoft environment. From there, you just filter based on the "YES"
> judgement.

FWIW, my ~/.procmailrc file contains this recipe...

   # 1) If SpamAssassin says it is spam, put it in a spamfile
   :0:
   * ^X-Spam-Flag:.*YES
   /home/lpitcher/spam/.spamfile

 From this file, I can rescue any improperly classified mail. The file is
rotated on a daily basis, with one previous generation kept (i.e. Today's
spam, and Yesterday's spam).

--
Lew Pitcher

Master Codewright and JOAT-in-training
Registered Linux User #112576 (http://counter.li.org/)
Slackware - Because I know what I'm doing.