[pmmail-list] Filtering with POPFile
James Moe
pmmail-list@blueprintsoftwareworks.com
Mon, 08 Sep 2003 13:58:45 -0700 (MST)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Mon, 08 Sep 2003 11:23:33 -0400, John Swartzentruber wrote:
>>This is a very good point I hadn't considered. It makes my decision
>>difficult, because I really like the magnets. I'll ask my friends
>>if they use Outlook or Exchange, and perhaps demagnetize them if
>>so.
>
>But is this sufficient? What if they aren't using Outlook, but are in
>the address book of someone who is? Couldn't they be spoofed as the
>sender and still be processed as a magnet?
>
You could add another filter that checks the header for the "X-Mailer" or
"X-Newsreader" line. A typical pmmail x-mailer looks like
X-Mailer: PMMail 2000 Professional (2.20.2717) For Windows 2000 (5.0.2195;4)
and samples from a newsgroup
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
So you can enable the filter while a virus/worm runs amok and disable it once it
settles down.
- --
jimoe at sohnen-moe dot com
pgp/gpg public key: http://www.keyserver.net/en/
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0 OS/2 for non-commercial use
Comment: PGP 5.0 for OS/2
Charset: cp850
wj8DBQE/XO2FsxxMki0foKoRAvZNAKC7pBfknAOQLCSNUYtAes2UCDNzZgCdHvaa
fEsBYd0EnPkZcXrkW9DddNo=
=lyYt
-----END PGP SIGNATURE-----
- pmmail-list - The PMMail Discussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com
with the first line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------