[pmmail-list] Filtering with POPFile

John Swartzentruber pmmail-list@blueprintsoftwareworks.com
Mon, 08 Sep 2003 17:09:57 -0400


On Mon, 08 Sep 2003 13:58:45 -0700 (MST), James Moe wrote:

>  You could add another filter that checks the header for the "X-Mailer" or 
>"X-Newsreader" line. A typical pmmail x-mailer looks like
>
>    X-Mailer: PMMail 2000 Professional (2.20.2717) For Windows 2000 (5.0.2195;4)
>
>and samples from a newsgroup
>    X-Mailer: Microsoft Outlook Express 6.00.2800.1158
>    X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
>
>  So you can enable the filter while a virus/worm runs amok and disable it once it 
>settles down.

I'm not sure what this would do in this situation. Even if the sender
is an Outlook user, the viruses I've seen don't add the X-Mailer line.
Then again, I've only seen Klez and BugBear and only to a mailing list
I host. I'm lucky or unpopular enough that I never receive any virus
messages myself.



- pmmail-list - The PMMail Discussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com

To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com 
with the first line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------