[unisog] procmail rule: sobig.f

[Kevin Spicer]

I just found the following sendmail ruleset (untested by me so far)
which should block Sobig without using the MailScanner header...

(original source http://www.nukecops.com/article-521-nested-0-0.html
I altered Re: Thank you! and Thank you!  as there shouldn't be a space
before the !)

##

## Common Virus Subjects

##

HSubject:                       $>Check_Subject

D{VMsg}" - [EXT_VMSG] This message may contain a virus - see
http://computercops.biz/anti-spam.html"

SCheck_Subject

R$* ILOVEYOU $*                         $#error $: 550 5.7.0 ${VMsg}

RA funny game $*                        $#error $: 550 5.7.0 ${VMsg}

RA special nice game $*                 $#error $: 550 5.7.0 ${VMsg}

RRe : some questions $*                 $#error $: 550 5.7.0 ${VMsg}

RHappy Allhallowmas $*                  $#error $: 550 5.7.0 ${VMsg}

RHave a good Allhallowmas $*            $#error $: 550 5.7.0 ${VMsg}

RW32 . Klez . E removal tools $*        $#error $: 550 5.7.0 ${VMsg}

RRe : Approved                          $#error $: 550 5.7.0 ${VMsg}

RRe : Details                           $#error $: 550 5.7.0 ${VMsg}

RRe : Re : My details                   $#error $: 550 5.7.0 ${VMsg}

RRe : Thank you!                       $#error $: 550 5.7.0 ${VMsg}

RRe : That movie                        $#error $: 550 5.7.0 ${VMsg}

RRe : Wicked screensaver                $#error $: 550 5.7.0 ${VMsg}

RRe : Your application                  $#error $: 550 5.7.0 ${VMsg}

RThank you!                            $#error $: 550 5.7.0 ${VMsg}

RYour details                           $#error $: 550 5.7.0 ${VMsg}






BMRB International
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the
recipient and may contain confidential and/or privileged
material.  If you have received this in error, please contact the
sender and delete this message immediately.  Disclosure, copying
or other action taken in respect of this email or in
reliance on it is prohibited.  BMRB International Limited
accepts no liability in relation to any personal emails, or
content of any email which does not directly relate to our
business.