[Esa-l] SoBig local rule - updated
John D. Hardin
jhardin at impsec.org
Thu Aug 28 06:44:56 PDT 2003
On Tue, 26 Aug 2003, Sergey Latkin wrote:
> If you want to trap DSNs, too, then remove X-MailScanner condition.
Try this:
> :0
> * > 98000
> * < 130000
> * ^Content-Type:.*multipart/mixed;
> * HB ?? ^X-MailScanner: Found to be clean
> {
--
John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/
jhardin at impsec.org pgpk -a jhardin at impsec.org
key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...the Fates notice those who buy chainsaws...
-- www.darwinawards.com
-----------------------------------------------------------------------
65 days until Matrix Revolutions
More information about the esa-l
mailing list