[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Full-Disclosure] Re: Filtering sobig with postfix
- To: Bojan.Zdrnja@LSS.hr, JThomas@poweronemedia.com, irwanhadi@phxby.com
- Subject: RE: [Full-Disclosure] Re: Filtering sobig with postfix
- From: psz@maths.usyd.edu.au (Paul Szabo)
- Date: Fri, 22 Aug 2003 11:56:39 +1000 (EST)
> ... use:
>
> /^TVqQAAMAAAAEAAAA\/\/8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAA$/
> DISCARD Keep your viruses (sobig.f)
>
> Shamelessly stolen from:
> http://sbserv.stahl.bau.tu-bs.de/~hildeb/postfix/postfix_sobigf.shtml
That discards most (but not all!) executables. Discarding all might be a
good thing; beware of those you let through.
Cheers,
Paul Szabo - psz@maths.usyd.edu.au http://www.maths.usyd.edu.au:8000/u/psz/
School of Mathematics and Statistics University of Sydney 2006 Australia
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html