[geeks] when will it end?

[Brian]

I use nkvir-rc to filter em out, Im getting way less now, at the peak it was
over a hundred a day, now its like 10 or so.

    Brian

----- Original Message ----- 
From: "Bill Bradford" <mrbill at mrbill.net>
To: <geeks at sunhelp.org>
Sent: Thursday, November 20, 2003 11:40 AM
Subject: [geeks] when will it end?


> I'm *SO* tired of these fake Microsft update mails.
>
> I've started collecting the subject lines and senders and putting them
into
> header_checks (postfix).  Here's what I've got, after a week or so:
>
> I could probably make 2-3 regexps that would match.  I might get around to
> them this weekend...
>
> SUBJECT:
> (Newest|Current|Last|Latest|New|Net|Microsoft|Critical) \
> (Microsoft|Network|Internet|Critical|Security|Internet) \
> (Security|Critical|Upgrade|Update|Patch|Pack)
>
> etc
>
> /^SUBJECT: Newest Microsoft Security Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Newest Network Security Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Newest Network Critical Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Newest Internet Security Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Newest Microsoft Critical Update / REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Newest Microsoft Upgrade/ REJECT FAKE MICROSOFT UPDATE
>
> /^SUBJECT: Current Critical Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Internet Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Network Security Pack/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Microsoft Security Pack/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Network Security Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Network Critical Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Internet Critical Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Internet Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Microsoft Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Microsoft Pack/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Microsoft Critical Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Microsoft Security Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Current Internet Security Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: current microsoft security patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: current security update/ REJECT FAKE MICROSOFT UPDATE
>
> /^SUBJECT: Last Net Critical Pack/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Net Security Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Net Security Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Microsoft Security Pack/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Microsoft Security Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Critical Pack/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Critical Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Network Critical Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Network Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Security Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Microsoft Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Last Internet Update/ REJECT FAKE MICROSOFT UPDATE
>
> /^SUBJECT: Latest Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Latest Net Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Latest Microsoft Security Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Latest Microsoft Security Pack/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Latest Microsoft Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Latest Network Critical Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Latest Critical Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Latest Internet Critical Update/ REJECT FAKE MICROSOFT UPDATE
>
> /^SUBJECT: New Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Internet Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Net Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Net Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Internet Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Network Critical Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Newest Internet Critical Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Internet Security Patch/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Internet Pack/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: New Microsoft Pack/ REJECT FAKE MICROSOFT UPDATE
>
> /^SUBJECT: Net Critical Update/ REJECT FAKE MICROSOFT UPDATE
>
> /^SUBJECT: Microsoft Critical Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Microsoft Critical Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Critical Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Security Update/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Upgrade/ REJECT FAKE MICROSOFT UPDATE
> /^SUBJECT: Bug Announcement/ REJECT FAKE MICROSOFT UPDATE
>
> /^From: MS Corporation/ REJECT FAKE MICROSOFT UPDATE
> /^From: MS Program Security Center/ REJECT FAKE MICROSOFT UPDATE
> /^From: MS Corporation Internet Security/ REJECT FAKE MICROSOFT UPDATE
> /^From: Microsoft Security Section/ REJECT FAKE MICROSOFT UPDATE
> /^From: Network Security Section/ REJECT FAKE MICROSOFT UPDATE
> /^From: Program Security Division/ REJECT FAKE MICROSOFT UPDATE
> /^From: Security Department/ REJECT FAKE MICROSOFT UPDATE
> /^From: Microsoft Corporation Security/ REJECT FAKE MICROSOFT UPDATE
> /^From: MS Internet Security/ REJECT FAKE MICROSOFT UPDATE
> /^From: Microsoft Corporation/ REJECT FAKE MICROSOFT UPDATE
> /^From: Technical Services/ REJECT FAKE MICROSOFT UPDATE
>
> -- 
> bill bradford
> mrbill at mrbill.net
> austin, texas
> _______________________________________________
> GEEKS:  http://www.sunhelp.org/mailman/listinfo/geeks