[Esd-l] Signature to trap Mimail.C (fwd)

[Peter Warasin]

hi

On Wed, 2003-11-05 at 00:47, John D. Hardin wrote:

are you sure this signature (MiMail.C) is correct?
i consider this supplements:

* > 10000
* < 50000
* ^From:.*james@
* ^Subject:.*our private photos

(information from the symantec homepage)

what do you think?

peter