Re: [OT] inundated by Swen / Gibe emails

[bkhl@elektrubadur.se (Björn Lindström)]

ray@nabuli.de writes:

> That's my rate too ... about ... isn't there any end of that in the
> near future?  It's becoming nasty!

My problems ended after applying the following procmail rules. Normally
I download all mail and split it with Gnus/bogofilter on my home
machine, but 500 140Kb+ messages a day ain't nice on a modem
connection. These two rules has taken out almost everything Swen-related
so far. The first rules just goes for suspicious attachment content
headers, the second does the same thing but smarter (and slower).

----

:0 B
* ^Content-Type:.application/(msword|(x-)?msdownload|vnd.ms-[aptw].*)
{
    LOG="[worm] "

    :0
    /dev/null
}

:0 B
* ^Content-Transfer-Encoding:.*base64
* ^TVqQAAMAAAAEAAAA//8AALg
* 4fug4AtAnNIbg
{
    LOG="[worm] "

    :0
    /dev/null
}

----

-- 
Björn Lindström <bkhl@elektrubadur.se>
http://bkhl.elektrubadur.se/

Hearken to the new *Elektrubadur* demo at http://elektrubadur.se/