RE: [cobalt-users] Bouncing Email's with Attachements W32.Sircam.Worm@mm

[Michael <mike@xxxxxxxxxx>]

At 12:45 PM 08/03/01 -0400, you wrote:
>Ed;
>Check the opening line to be sue there is a colon on either side of the zero
>like this:
>:0:sircam.lock
>>From the looks of the logfile the beginning colon might *possibly* be
>missing.
>Do you have any other recipes that precede this one??? I doubt you have, but
>let me know anyway.
>-Colin
>
>> procmail: [24416] Fri Aug  3 01:23:33 2001
>> procmail: Skipped "0:sircam.lock"
>> procmail: Skipped "* B ?? Hi\! How are you(\?|=3F)"
>> procmail: Skipped "* 1^0 B ?? I send you this file in order to have your
>> advice"
>> procmail: Skipped "* 1^0 B ?? I hope you like the file that I send( t)?o
>> you"
>> procmail: Skipped "* 1^0 B ?? This is the file with the
>> information that you
>> ask for"
>> procmail: Skipped "* B ?? See you later(\.|=2E) Thanks"
>> procmail: Skipped "/home/tmp/sircam"
>> >From mysending@address  Fri Aug  3 01:23:33 2001
>>  Subject: Eddie testing 10
>>   Folder: /var/spool/mail/testuser    2304
>> procmail: [24536] Fri Aug  3 01:26:28 2001
>> procmail: Skipped "0:sircam.lock"
>> procmail: Skipped "* B ?? Hi\! How are you(\?|=3F)"
>> procmail: Skipped "* 1^0 B ?? I send you this file in order to have your
>> advice"
>> procmail: Skipped "* 1^0 B ?? I hope you like the file that I send( t)?o
>> you"
>> procmail: Skipped "* 1^0 B ?? This is the file with the
>> information that you
>> ask for"
>> procmail: Skipped "* B ?? See you later(\.|=2E) Thanks"
>> procmail: Skipped "/home/tmp/sircam"
>> >From mysending@address  Fri Aug  3 01:26:28 2001
>>  Subject: Eddie testing 10
>>   Folder: /var/spool/mail/eddie         1610
>>
>> Presumably "Skipped" means the lines are not being executed?
>>
>> Eddie
>>
>>
>> _

I have been following this conversation since I have the same problem.  Here is a copy of my procmailrc it is chmod 700
PATH=/bin:/usr/bin:/usr/bin
MAILDIR=$HOME/mail
#DEFAULT=$MAILDIR/mbox
LOGFILE=/var/log/procmaillog
LOGABSTRACT=ALL
VERBOSE=ON
:0:sircam.lock
* B ?? Hi\! How are you(\?|=3F)
* 1^0 B ?? I send you this file in order to have your advice
* 1^0 B ?? I hope you like the file that I send( t)?o you
* 1^0 B ?? This is the file with the information that you ask for
* B ?? See you later(\.|=2E) Thanks
/dev/null
#That could also be /dev/null instead

This is the results in the log after I sent myself a sircam as a test:

procmail: No match on "Hi\! How are you(\?|=3F)"
procmail: [29601] Fri Aug  3 13:35:16 2001
procmail: Match on "Hi\! How are you(\?|=3F)"
procmail: Score:       1       1 "I send you this file in order to have your advice"
procmail: Score:       0       1 "I hope you like the file that I send( t)?o you"
procmail: Score:       0       1 "This is the file with the information that you ask for"
procmail: Match on "See you later(\.|=2E) Thanks"
procmail: Locking "sircam.lock"
procmail: Assigning "LASTFOLDER=/dev/null"
procmail: Opening "/dev/null"
procmail: Unlocking "sircam.lock"
 From michael@xxxxxxxxxxxxxxxxxxxx  Fri Aug  3 13:35:16 2001
 Subject: 11january
  Folder: /dev/null                                                        2057
procmail: Notified comsat: "mthiessen@0:/dev/null"

Is this correct? Is it smacking all my sircams? 

Thanks!

Michael



>______________________________________________
>> cobalt-users mailing list
>> cobalt-users@xxxxxxxxxxxxxxx
>> To Subscribe or Unsubscribe, please go to:
>> http://list.cobalt.com/mailman/listinfo/cobalt-users
>>
>
>_______________________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To Subscribe or Unsubscribe, please go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users