FriendlyGreeting is Expanding

Remco Barendse mailscanner at BARENDSE.TO
Thu Nov 14 09:10:42 GMT 2002

Should or shouldn't that include LOCAL_RULESETS before the lines below
that you put in (they can be put in right, I
have never been able to figure out how the .cf files work)

Also where do I put it in

I just added at the bottom of the file, replaced the whitespaces with
tabs after the last few lines starting from  $* up until the $#error bit.
Then my mail server simply stopped accepting any mail whatsoever....

May I suggest a 'complete morons guide to stopping FriendlyGreeting cards'
for people like me? :)


On Wed, 13 Nov 2002, Julian Field wrote:

> At 16:28 13/11/2002, you wrote:
> >I am ready to just block all e-mail.
> Do that and I'll have to go back to collecting things (glasses, clocks,
> bottles of brandy...)
> :-)
> >I attached the two possibilitys now according to Mcafee.  Does anybody
> >have a long term solution for these guys.  I believe the rule that
> >Julian suggested adding to spam.assassin.prefs.conf only covers the
> >first one.
> I have only seen these two. The second one appeared last week. Updates for
> or spam.assassin.prefs.conf are included here for everyone's
> benefit. If I hear any more news in this I'll let you all know.
> Stop them in sendmail:
> HSubject: $>Check_Subject
> D{FriendPat1}you have an E-Card from
> D{FriendPat2}you have a greeting card from
> D{FriendMsg}This message is probably a nasty E-Card.
> SCheck_Subject
> R$* ${FriendPat1} $*            $#error $@ 5.7.1 $: ${FriendMsg}
> R$* ${FriendPat2} $*            $#error $@ 5.7.1 $: ${FriendMsg}
> Or stop them in SpamAssassin:
> header   FRIEND_GREETINGS       Subject =~ /you have an E-Card from/i
> describe FRIEND_GREETINGS       Nasty E-card from
> score    FRIEND_GREETINGS       100.0
> header   FRIEND_GREETINGS2      Subject =~ /you have a greeting card from/i
> describe FRIEND_GREETINGS2      Nasty E-card from
> score    FRIEND_GREETINGS2      100.0
> --
> Julian Field                Teaching Systems Manager
> jkf at         Dept. of Electronics & Computer Science
> Tel. 023 8059 2817          University of Southampton
>                              Southampton SO17 1BJ

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

More information about the MailScanner mailing list