[geeks] arrrggghhh

[Bill Bradford]

On Fri, Oct 12, 2001 at 06:24:02PM +0100, Will Mc Donald wrote:
> Tell me about it.
> Our mail server's straining under the load of extra SirCam spam.

Easy.  

/etc/postfix/header_checks:

/^X-unsent: 1/                                                  REJECT

/etc/postfix/body_checks:

/^(Hi! How are you=3F$|Hola como estas=3F$)/                    REJECT
/(usa\.net|hotmail\.com|yahoo\.com)\?subject=remove/            REJECT
/^[     ]*name=.*\.(exe|dll|eml|vbs)/                           REJECT
/^Content-Disposition: attachment;filename=.*\.(doc|zip|exe|xls|jpg|gif)\.(pif|b
at|com|exe|lnk)$/                                               
                                                                REJECT
/^Content-Disposition: attachment;filename=.*\.(doc|zip|exe|xls|jpg|gif)\.(pif|b
at|com|exe|lnk)$/                                               
                                                                REJECT
/(filename|name)=.*\.(asd|chm|dll|hlp|hta|js|ocx|pif)/          REJECT
/(filename|name)=.*\.(scr|shb|shs|vb|vbe|vbs|wsf|wsh)/          REJECT
/(filename|name)=.*\.(com|bat|lnk)/                             REJECT
/(filename|name)=(WTC|wtc|README)\.EXE/                         REJECT
/(filename|name)=(Happy99|Navidad|prettypark|pretty park|zipped_files|flcss|Msin
it|wininit|msi216|readme|README|Avp_updates|Qi_test|Anti_cih)\.exe/
                                                        REJECT
/(filename|name)=(dhcp*|Emanuel|kmbfejkm|NakedWife|Seicho_no_ie|JAMGCJJA|Sulfnbk
)\.exe/                                                         REJECT
/(kak|day)\.(reg|hta)/                                          REJECT

lessee.. in the past month:

bash-2.03$ wc -l reject-log
    2620 reject-log

-- 
Bill Bradford
mrbill at mrbill.net
Austin, TX