Re: [cobalt-users] Getting Mail Bombed!

["Steve Werby" <steve-lists@xxxxxxxxxxxx>]

"Carrie Bartkowiak" <ravencarrie@xxxxxxxx> wrote:
> I'm getting somewhere.
> On this page:
> http://tbtf.com/blog/2000-05-07.html
> I found a procmail script that filters .vbs attachments. Since the
> ones that Mike and David are getting are .bat attachments, I think it
> would be simple to modify. How does this look?

The procmail recipe below looks like it might work (to be clear, it will
route the email to a special folder, not strip the attachment which is
another alternative, but trickier to implement), though I don't know that
the attached filename appears in the email headers in which case the email
won't match that rule and therefore won't be executed.  Perhaps you can test
the rule by sending an attachment of test.bat to yourself.  I'll be glad to
look into it now that I'm clear on the problem and what's desired, but I
won't be able to for at least 10 hours.

> LOGFILE=/var/log/procmaillog
>    COMSAT=off
>
>    :0 B
>    * ^Content-Disposition:.*
>    * .*.bat.*
>    * !^FROM_DAEMON
>    * !^X-Loop: vbscheck
>    {
>
>        :0 c
>        /var/log/procmail.filtered
>
> }

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/