[cobalt-users] Procmail Rules Against Viruses...

["Santiago Montalvan" <smontalvan@xxxxxxxxxxxxxxxxx>]

I created the following Procmail Rules (I believe they are right but I would
double check):

# W32.Dumaru.M@mm
:0 HBfw
* ^Subject: Use this patch immediately !*
* ^Content-Type:.*
* ( |   | file| file)name=.*\.Patch.exe
| formail -b -f -A "$AV_header Dumaru (W32.Dumaru.M@mm) Worm detected."
        :0 a:
        ${VIRUSDUMP}

# W32.Israz.B@mm
:0 HBfw
* ^Subject: (Your file is attached to message.|Something new for you)
* ^Content-Type:.*
* ( |   | file| file)name=.*\.(game.exe|tips.exe)
| formail -b -f -A "$AV_header Israz (W32.Israz.B@mm) Worm detected."
        :0 a:
        ${VIRUSDUMP}

# W32.HLLW.Lovgate@mm
:0 HBfw
* ^Subject: (Documents|Roms|Pr0n!|Evaluation copy|Help|Beta|Do not
release|Last Update|The patch|Cracks!)
* ^Content-Type:.*
* ( |   | file|
file)name=.*\.(Docs.exe|Roms.exe|sex.exe|Setup.exe|source.exe|_SetupB.exe|Pa
ck.exe|LUPdate.exe|Patch.exe|CrkList.exe)
| formail -b -f -A "$AV_header Lovgate (W32.HLLW.Lovgate@mm) Worm detected."
        :0 a:
        ${VIRUSDUMP}

Input is welcome.

Thanks!

Santiago.