[Esa-l] Poisoning "from" and subject line?
Phil Pennock
pdp at nl.demon.net
Fri Dec 1 01:30:50 PST 2000
On 2000-11-30 at 20:36 +0000, Bjarni R. Einarsson wrote:
> # Uncomment this to save viruses in a different mailbox for each user
> #QUARANTINE=/path/to/quarantine/viruses.$LOGNAME
> # Uncomment this to forward viruses to an admin
> #QUARANTINE=!admins at email.address
> :0
> * Subject: Snowhite and the Seven Dwarfs - The REAL story!
> $QUARANTINE
> ... of course, please test this before deploying it globally. I
> wrote it from memory and probably made one or two mistakes.
Always the way. :^)
If $QUARANTINE is a file, then you need to change ``:0'' to ``:0:'' in
order to get file-locking; otherwise if you get concurrent deliveries
(likely with a worm hitting an office network) then they'll get mixed
up, both appending at the same time.
--
Phil Pennock <pdp at nl.demon.net> <Phil.Pennock at thus.net>
Demon Internet Nederland -- Network Operations Centre -- Systems Administrator
Libertes philosophica.
Sales: +31 20 422 20 00 Support: 0800 33 6666 8
More information about the esd-l
mailing list