You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 536 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Rejecting SOBIG & More Virus Emails with Sendmail
SecurityHi folks, I wrote a nice sendmail filter to block email messages based on the subject header. So instead of my blocking the email addresses I mentioned earlier due to Sobig, I now changed it to this instead. I tested it using Sendmail interactively as well as sending email to local accounts from Yahoo.

##

## Common Virus Subjects
##
HSubject: $>Check_Subject
D{VMsg}" - [EXT_VMSG] This message may contain a virus - see http://computercops.biz/anti-spam.html"

SCheck_Subject
R$* ILOVEYOU $* $#error $: 550 5.7.0 ${VMsg}
RA funny game $* $#error $: 550 5.7.0 ${VMsg}
RA special nice game $* $#error $: 550 5.7.0 ${VMsg}
RRe : some questions $* $#error $: 550 5.7.0 ${VMsg}
RHappy Allhallowmas $* $#error $: 550 5.7.0 ${VMsg}
RHave a good Allhallowmas $* $#error $: 550 5.7.0 ${VMsg}
RW32 . Klez . E removal tools $* $#error $: 550 5.7.0 ${VMsg}
RRe : Approved $#error $: 550 5.7.0 ${VMsg}
RRe : Details $#error $: 550 5.7.0 ${VMsg}
RRe : Re : My details $#error $: 550 5.7.0 ${VMsg}
RRe : Thank you ! $#error $: 550 5.7.0 ${VMsg}
RRe : That movie $#error $: 550 5.7.0 ${VMsg}
RRe : Wicked screensaver $#error $: 550 5.7.0 ${VMsg}
RRe : Your application $#error $: 550 5.7.0 ${VMsg}
RThank you ! $#error $: 550 5.7.0 ${VMsg}
RYour details $#error $: 550 5.7.0 ${VMsg}
Posted on Tuesday, August 19 @ 14:53:53 CEST by Zhen-Xjell
 
Related Links
· Computer Cops
· More about Security
· News by Zhen-Xjell


Most read story about Security:
PHP-Nuke admin.php security hole - PATCHED

Article Rating
Average Score: 4
Votes: 3


Please take a second and vote for this article:

Excellent
Very Good
Good
Regular
Bad


Options

 Printer Friendly Page  Printer Friendly Page

 Send to a Friend  Send to a Friend

Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: Rejecting SOBIG & More Virus Emails with Sendmail (Score: 1)
by publicx2001 on Tuesday, August 19 @ 22:15:27 CEST
(User Info | Send a Message)
Can you explain how to use this? I use formmail -
thanks



Re: Rejecting SOBIG & More Virus Emails with Sendmail (Score: 1)
by Ronin on Wednesday, August 20 @ 02:02:31 CEST
(User Info | Send a Message)
I just added amavisd_new and F-prot for linux (free for home use) to my Postfix/Spamassassin/Procmail setup. Works great quarantining virii at the server!



Re: Rejecting SOBIG & More Virus Emails with Sendmail (Score: 1)
by decker on Wednesday, August 20 @ 03:19:42 CEST
(User Info | Send a Message)
I use sendmail.

How and where do i apply this rule?

-dec-


Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.086 Seconds - 226 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::