Subj : Re: How to detect WORMS/VIRUS that send spam
To   : comp.os.linux.networking,comp.os.linux.misc,comp.os.linux,comp.os.linux.help
From : Solbu
Date : Sun Aug 08 2004 11:54 am

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On tirsdag 3. august 2004, 09:31 Steve Phils tried to express an opinion:

> Currently we noticed that all of our staff members are receiving lot
> of spam mails with some attachments(mostly with some *.pif extension)
> in their official mail address. 

I see you got a few idčas already.
I thought I'd share with you my solution to these spam problems.
Visit this page, and follow the instructions.
http://advosys.ca/papers/postfix-filtering.html

It's a kind of an idiots guide, so it's easy to set up.
I had this working on the first try. :-)
The script removes all executeable windows-attachments,
leave a note in the mail explaining what was done, and why.

i've also modified it to remove all HTML from the email as well :-)
(I really do hate html in email.)


NOTE: This guide assume you use POSTFIX as your mailserver,
and not sendmail or Qmail.

- -- 
Solbu - http://www.solbu.net
Remove 'ugyldig' for email
PGP key ID: 0xFA687324
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFBFeplT1rWTfpocyQRAuvZAKC3bYAJf6forSJav+Tb4jhnWSsi5gCg6sCL
MEiaZgBznN1phEK53U7LlxY=
=9Kul
-----END PGP SIGNATURE-----

.