[clug] Procmail rule to match all this virus email?

[Michael Still]

On Thu, 29 Jan 2004, Arjen Lentz wrote:

> On Thu, 2004-01-29 at 12:23, Martijn van Oosterhout wrote:
> > On Thu, Jan 29, 2004 at 07:48:59AM +1000, Arjen Lentz wrote:
> > > :0 B
> > > * ^Content-Type: text/plain; charset="Windows-1252"
> > > * ^Content-Type: application/octet-stream;
> > > name=.*\.(bat|cmd|exe|pif|scr|zip)
> > > * ^UEsDBAoAAAAAA.....DKJx\+eAFgAAABYAA
> > 
> > Umm, since your match both header and body text, don't you need to specify
> > the h flag aswell?
> 
> Nop, I'm not matching with header lines. All the above stuff is in the
> body, as part of the usual MIME segments. But do see the fixed-up
> version that I posted this morning, works like a charm...

I don't think I've seen a fixed version. can I have a hint please?

Thanks,
Mikal

-- 

Michael Still (mikal at stillhq.com) | "All my life I've had one dream,
http://www.stillhq.com            |  to achieve my many goals"
UTC + 11                          |    -- Homer Simpson