[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

zmailer subject filtering ? ( ie controlling Melissa virus)




In light of the recent Melissa email Virus, I was wondering 
how, in zmailer, to emulate the sendmail patch posted at:

ftp://ftp.cert.org/pub/cert_advisories/Patches/CA-99-04-sendmail-melissa-filter.txt

In this config patch to LOCAL_RULESETS for sendmail, it is 
suggested to provide filtering on:

	HSubject:                       $>local_check_header

	D{MelissaMessage}"553 Your message may contain the Melissa virus. \
	Please email postmaster@$j if you have questions."

	Slocal_check_header
	RImportant Message From $*      $#error $: ${MelissaMessage}
	RRe: Important Message From $*  $#error $: ${MelissaMessage}

which is a weak kludge, yes (because a similar virus only needs to alter
the subject line), but it may at least serve to control spread of the
current macro virus. 

Is there a quick kludge for same in zmailer?

Cheers,
--
James S. MacKinnon           Office: P-139 Avadh-Bhatia Physics Lab
Team Physics                 Voice : (780) 492-8226 [old AC 403]
University of Alberta        email : Jim.MacKinnon@Phys.UAlberta.CA
Edmonton, Canada T6G 2N5     WWW   : http://www.phys.ualberta.ca/