[clug] Procmail rule to match all this virus email?

[Arjen Lentz]

Hi Martijn,

On Thu, 2004-01-29 at 12:23, Martijn van Oosterhout wrote:
> On Thu, Jan 29, 2004 at 07:48:59AM +1000, Arjen Lentz wrote:
> > :0 B
> > * ^Content-Type: text/plain; charset="Windows-1252"
> > * ^Content-Type: application/octet-stream;
> > name=.*\.(bat|cmd|exe|pif|scr|zip)
> > * ^UEsDBAoAAAAAA.....DKJx\+eAFgAAABYAA
> 
> Umm, since your match both header and body text, don't you need to specify
> the h flag aswell?

Nop, I'm not matching with header lines. All the above stuff is in the
body, as part of the usual MIME segments. But do see the fixed-up
version that I posted this morning, works like a charm...

Regards,
Arjen.
-- 
Arjen Lentz, Technical Writer, Trainer
Brisbane, QLD Australia
MySQL AB, www.mysql.com

Brisbane 2 Feb 2004 (5 days): Using & Managing MySQL Training
Training,Support,Licenses,T-shirts @ https://order.mysql.com/?marl