Headsup - 20_ratware.cf Outlook 2003

[Jan-Peter Koopmann]

> my ratware says..

I think he was referring to SA3 and the 20_ratware.cf there. And that
version says

# Outlook versions that usually use "dollar signs"
header __OUTLOOK_DOLLARS_MUA    X-Mailer =~ /^Microsoft Outlook(?: 8|
CWS, Build 9|, Build 10)\./
header __OUTLOOK_DOLLARS_OTHER  MESSAGEID =~ /^<\!\~\!/m
meta __FORGED_OUTLOOK_DOLLARS   (__OUTLOOK_DOLLARS_MUA &&
!__OUTLOOK_DOLLARS_MSGID && !__OUTLOOK_DOLLARS_OTHER && !__IMS_MSGID &&
!_
_UNUSABLE_MSGID)

# use new meta rules to implement FORGED_MUA_OUTLOOK rule from 2.60
meta FORGED_MUA_OUTLOOK         (__FORGED_OE ||
__FORGED_OUTLOOK_DOLLARS)
describe FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS
Outlook


etc.

Regards,
  JP

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).