[pmmail-list] Filtering with POPFile

James Moe pmmail-list@blueprintsoftwareworks.com
Mon, 08 Sep 2003 13:58:45 -0700 (MST)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 08 Sep 2003 11:23:33 -0400, John Swartzentruber wrote:

>>This is a very good point I hadn't considered.  It makes my decision
>>difficult, because I really like the magnets.  I'll ask my friends
>>if they use Outlook or Exchange, and perhaps demagnetize them if
>>so.
>
>But is this sufficient? What if they aren't using Outlook, but are in
>the address book of someone who is? Couldn't they be spoofed as the
>sender and still be processed as a magnet?
>
  You could add another filter that checks the header for the "X-Mailer" or 
"X-Newsreader" line. A typical pmmail x-mailer looks like

    X-Mailer: PMMail 2000 Professional (2.20.2717) For Windows 2000 (5.0.2195;4)

and samples from a newsgroup
    X-Mailer: Microsoft Outlook Express 6.00.2800.1158
    X-Newsreader: Microsoft Outlook Express 6.00.2600.0000

  So you can enable the filter while a virus/worm runs amok and disable it once it 
settles down.


- --
jimoe at sohnen-moe dot com
pgp/gpg public key: http://www.keyserver.net/en/
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0 OS/2 for non-commercial use
Comment: PGP 5.0 for OS/2
Charset: cp850

wj8DBQE/XO2FsxxMki0foKoRAvZNAKC7pBfknAOQLCSNUYtAes2UCDNzZgCdHvaa
fEsBYd0EnPkZcXrkW9DddNo=
=lyYt
-----END PGP SIGNATURE-----
- pmmail-list - The PMMail Discussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com

To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com 
with the first line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------