[geeks] arrrggghhh

[Will Mc Donald]

Easy if you're the chief admin monkey, and have a clue. I know these fixes
are available but it's not my job to implement 'em.  Politics, shmolitics.

However I will make note for when it's mine, alll mine! :)

----- Original Message -----
From: "Bill Bradford" <mrbill at mrbill.net>
To: <geeks at sunhelp.org>
Sent: Friday, October 12, 2001 6:48 PM
Subject: Re: [geeks] arrrggghhh


> On Fri, Oct 12, 2001 at 06:24:02PM +0100, Will Mc Donald wrote:
> > Tell me about it.
> > Our mail server's straining under the load of extra SirCam spam.
>
> Easy.
>
> /etc/postfix/header_checks:
>
> /^X-unsent: 1/                                                  REJECT
>
> /etc/postfix/body_checks:
>
> /^(Hi! How are you=3F$|Hola como estas=3F$)/                    REJECT
> /(usa\.net|hotmail\.com|yahoo\.com)\?subject=remove/            REJECT
> /^[     ]*name=.*\.(exe|dll|eml|vbs)/                           REJECT
> /^Content-Disposition:
attachment;filename=.*\.(doc|zip|exe|xls|jpg|gif)\.(pif|b
> at|com|exe|lnk)$/
>                                                                 REJECT
> /^Content-Disposition:
attachment;filename=.*\.(doc|zip|exe|xls|jpg|gif)\.(pif|b
> at|com|exe|lnk)$/
>                                                                 REJECT
> /(filename|name)=.*\.(asd|chm|dll|hlp|hta|js|ocx|pif)/          REJECT
> /(filename|name)=.*\.(scr|shb|shs|vb|vbe|vbs|wsf|wsh)/          REJECT
> /(filename|name)=.*\.(com|bat|lnk)/                             REJECT
> /(filename|name)=(WTC|wtc|README)\.EXE/                         REJECT
> /(filename|name)=(Happy99|Navidad|prettypark|pretty
park|zipped_files|flcss|Msin
> it|wininit|msi216|readme|README|Avp_updates|Qi_test|Anti_cih)\.exe/
>                                                         REJECT
>
/(filename|name)=(dhcp*|Emanuel|kmbfejkm|NakedWife|Seicho_no_ie|JAMGCJJA|Sul
fnbk
> )\.exe/                                                         REJECT
> /(kak|day)\.(reg|hta)/                                          REJECT
>
> lessee.. in the past month:
>
> bash-2.03$ wc -l reject-log
>     2620 reject-log