Blocking Subject Header

[Spicer, Kevin]

Raymond Dijkxhoorn wrote:
> Why not do this in your MTA ?
> 
Heres an example that we used to block the Sobig emails with sendmail.  This was added to the end of sendmail.mc and we rebuilt the sendmail.cf from that.  [This isn't original work, I got it from this list of the web somewhere - so apologies for not crediting the original author...]

LOCAL_RULESETS
## Common Virus Subjects
##
HSubject:               $>Check_Subject
D{VMsg}" - This message may contain a virus - This subject is associated with a known virus, for genuine mail please resend with different subject text."
SCheck_Subject
R$* ILOVEYOU $*                 $#error $: 550 5.7.0 ${VMsg}
RA funny game $*                $#error $: 550 5.7.0 ${VMsg}
RA special nice game $*         $#error $: 550 5.7.0 ${VMsg}
RRe : some questions $*         $#error $: 550 5.7.0 ${VMsg}
RHappy Allhallowmas $*          $#error $: 550 5.7.0 ${VMsg}
RHave a good Allhallowmas $*    $#error $: 550 5.7.0 ${VMsg}
RW32 . Klez . E removal tools $*        $#error $: 550 5.7.0 ${VMsg}
RRe : Approved          $#error $: 550 5.7.0 ${VMsg}
RRe : Details           $#error $: 550 5.7.0 ${VMsg}
RRe : Re : My details           $#error $: 550 5.7.0 ${VMsg}
RRe : Thank you !               $#error $: 550 5.7.0 ${VMsg}
RRe : That movie                $#error $: 550 5.7.0 ${VMsg}
RRe : Wicked screensaver                $#error $: 550 5.7.0 ${VMsg}
RRe : Your application          $#error $: 550 5.7.0 ${VMsg}
RThank you !            $#error $: 550 5.7.0 ${VMsg}
RYour details           $#error $: 550 5.7.0 ${VMsg}



BMRB International 
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB International Limited 
accepts no liability in relation to any personal emails, or 
content of any email which does not directly relate to our 
business.