[ale] procmail filter on attachment name?

[Robert L. Harris]

Can you break down the sections?  I see you send out a message to the
offender that they sent you a virus, but where does /tmp/tumb get
defined, etc?


Thus spake Eric Melo (ericmelo at hackernetwork.com):

> Yes it is, check script below, make you ajustments.
> ps: if you need more help give a call! 
> Good luck! :)
> ###################################################3
> :0 B
>     * $"filename=.\+(pif|com|exe|bat|lnk|scr)"
> {
>     :0 c
>     |(formail -r -i"From:antivirus" -A"X-Loop: antivirus";\
>     cat /etc/virus.msg)|$SENDMAIL -oi -t
>     /tmp/tumb
> 
>     :0
>     /var/spool/procmail/${LOGNAME}.virus
>     /tmp/virus-tumb
> }
> 
> ######### end of /etc/procmailrc #####################
> :0 B
> * $"filename=.\+(pif|com|exe|vbs|bat|lnk|scr)"
> /tmp/xit
> 
> 
> 
> []'s Eric Melo
> Registered User #277266
> Started: feb 1996  
> "Be free,use Linux!"




:wq!
---------------------------------------------------------------------------
Robert L. Harris                     | GPG Key ID: E344DA3B
                                         @ x-hkp://pgp.mit.edu
DISCLAIMER:
      These are MY OPINIONS ALONE.  I speak for no-one else.

Life is not a destination, it's a journey.
  Microsoft produces 15 car pileups on the highway.
    Don't stop traffic to stand and gawk at the tragedy.

 PGP signature