Re: zmailer subject filtering ? ( ie controlling Melissa virus)

[mea@nic.funet.fi]

> In light of the recent Melissa email Virus, I was wondering 
> how, in zmailer, to emulate the sendmail patch posted at:
> 
> ftp://ftp.cert.org/pub/cert_advisories/Patches/CA-99-04-sendmail-melissa-filter.txt
...
> which is a weak kludge, yes (because a similar virus only needs to alter
> the subject line), but it may at least serve to control spread of the
> current macro virus. 
> 
> Is there a quick kludge for same in zmailer?

	Using 'procmail' as local delivery agent with global set
	of processing rules.

	Alternatively, somebody could complete the  contentpolicy()
	thing that exists as a hook in the smtpserver.  (hint, hint..)
	( smtpserver/contentpolicy.c,  smtpserver/cfgread.c;
	  the second one needs a new PARAM thing allowing
	  setup of the content-policy analysis program.
	  Consider: Is it enough to just wait() for the child, and
	  then use exit value as return code, or should some client-
	  server protocol be enacted in between the smtpserver proper,
	  and the content policy analyzer ? E.g. replies from the
	  analyzer tell what the analyzer liked of the message, while
	  the inputs just tell which spoolfile to analyze ? )

	My schedules don't allow any sufficiently quick kludges for
	this -- meaning anything completed last week :-(

> Cheers,
> Team Physics                 Voice : (780) 492-8226 [old AC 403]
> University of Alberta        email : Jim.MacKinnon@Phys.UAlberta.CA
> Edmonton, Canada T6G 2N5     WWW   : http://www.phys.ualberta.ca/

/Matti Aarnio <mea@nic.funet.fi>