[pmmail-list] Filtering with POPFile
John Swartzentruber
pmmail-list@blueprintsoftwareworks.com
Mon, 08 Sep 2003 17:09:57 -0400
On Mon, 08 Sep 2003 13:58:45 -0700 (MST), James Moe wrote:
> You could add another filter that checks the header for the "X-Mailer" or
>"X-Newsreader" line. A typical pmmail x-mailer looks like
>
> X-Mailer: PMMail 2000 Professional (2.20.2717) For Windows 2000 (5.0.2195;4)
>
>and samples from a newsgroup
> X-Mailer: Microsoft Outlook Express 6.00.2800.1158
> X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
>
> So you can enable the filter while a virus/worm runs amok and disable it once it
>settles down.
I'm not sure what this would do in this situation. Even if the sender
is an Outlook user, the viruses I've seen don't add the X-Mailer line.
Then again, I've only seen Klez and BugBear and only to a mailing list
I host. I'm lucky or unpopular enough that I never receive any virus
messages myself.
- pmmail-list - The PMMail Discussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com
with the first line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------