[Esa-l] Poisoning "from" and subject line?

Phil Pennock pdp at nl.demon.net
Fri Dec 1 01:30:50 PST 2000


On 2000-11-30 at 20:36 +0000, Bjarni R. Einarsson wrote:
>   # Uncomment this to save viruses in a different mailbox for each user
>   #QUARANTINE=/path/to/quarantine/viruses.$LOGNAME
>   # Uncomment this to forward viruses to an admin
>   #QUARANTINE=!admins at email.address
>   :0
>   * Subject: Snowhite and the Seven Dwarfs - The REAL story!
>   $QUARANTINE

> ... of course, please test this before deploying it globally.  I
> wrote it from memory and probably made one or two mistakes.

Always the way.  :^)

If $QUARANTINE is a file, then you need to change ``:0'' to ``:0:'' in
order to get file-locking; otherwise if you get concurrent deliveries
(likely with a worm hitting an office network) then they'll get mixed
up, both appending at the same time.
-- 
Phil Pennock                        <pdp at nl.demon.net> <Phil.Pennock at thus.net>
Demon Internet Nederland -- Network Operations Centre -- Systems Administrator
Libertes philosophica.
Sales: +31 20 422 20 00                                Support: 0800 33 6666 8



More information about the esd-l mailing list