[plug] ProcMail help needed

[Chris Griffin]

No doubt you are correct on all counts Paul.

1.      Does this mean I need spaces after the -x's ?
2.      I do not really understands the syntax of the searching lines, it 
is what I got off the pcguru site.
         If I need to changes this, what do you suggest?
3.      A perl script and virus scanning sounds good to me, any suggestions?

Many thanks for the help.


Chris


At 10:43 27/07/01 +0800, you wrote:
>Hya,
>
>Just a quick note, but I maybe wrong on this...
>
>After the switch in your formail command there is no space (eg 
>SUBJECT=`formail -xSubject:` & ARRIVED=`formail -xDate:`), this could be a 
>syntax error.
> 
>^ ^
>
>Also your searching for a lot of information with ".*.vbs.* & .*.vbx.*", 
>you might want to review this...
>                                                    ^              ^
>
>Maybe this would a good time to write a perl script to run first, ditch 
>"viruses" then process mail to users.
>
>
>At 09:23 AM 27/07/2001 +0800, you wrote:
>>A little while ago I implemented a Procmail script to try to strip off 
>>certail email attachments (.vbs and .vbx).
>>
>>I installed a procmail script solution onto one of  my key systems (I got 
>>it from the pcguru site) and all seems fine except that it issues the 
>>virus attachment message on all attachments, not just the ones I am 
>>filtering out, even though it still lets the attachments through and I am 
>>not sure it is filtering out the .vbs and .vbx ones. I will try to test 
>>this. It also seems to have filtered out a .jpg attachment when it had 
>>NOT been told to do so??
>>
>>The following is the entire contents of my /etc/procmailrc
>>
>>LOGFILE=/var/log/procmaillog
>>COMSAT=off
>>
>>:0 B
>>* ^Content-Disposition:.*
>>* .*.vbs.*
>>* .*.vbx.*
>>* !^FROM_DAEMON
>>* !^X-Loop: vbscheck
>>{
>>
>>SUBJECT=`formail -xSubject:`
>>ARRIVED=`formail -xDate:`
>>
>>     :0 c
>>     /var/log/procmail.filtered
>>
>>     :0
>>     | (formail -rt -A"Precedence: Virus" -A"X-Loop: vbscheck"; \
>>     echo "ATTENTION:"; \
>>     echo " "; \
>>     echo "The Mailer-Daemon at" $HOST "successfully received email from 
>> you"; \
>>     echo "on $ARRIVED with the subject: "$SUBJECT; \
>>     echo " "; \
>>     echo "However, it has found evidence of something that it believes 
>> to be a virus."; \
>>     echo " "; \
>>     echo "As a result, your email was NOT delivered to the recipient."; \
>>     echo " "; \
>>     echo "If you believe this to be a mistake, please email 
>> postmaster@"$HOST; \
>>     echo " "; \
>>     echo "Unless this is the case, please do not respond to this mail, 
>> it is an auto reply"; \
>>     ) | $SENDMAIL -oi -t -fpostmaster@$HOST
>>}
>>-------------------------------------------------------------------------------------------------------------------------------
>>
>>
>>The following is the contents of an email I got when someone sent me an 
>>email with a .jpg attachment. The attachment was  NOT passed through, it 
>>was stripped off.
>>
>>
>>ATTENTION:
>>The Mailer-Daemon at doladns successfully received email from you
>>on Tue, 15 May 2001 12:09:04 -0400 with the subject: [Ntop] Dropoff in 
>>performance after about an hour
>>However, it has found evidence of something that it believes to be a virus.
>>As a result, your email was NOT delivered to the recipient.
>>If you believe this to be a mistake, please email postmaster at doladns
>>Unless this is the case, please do not respond to this mail, it is an 
>>auto reply
>>_______________________________________________
>>
>>Can anyone please shed any light on what is going on for me? Many thanks 
>>in advance.
>>
>>Regards,
>>Chris Griffin
>>
>
>/***** Experience is that marvelous thing that enables you to recognize a 
>mistake when you make it again.
>Franklin P. Jones *****/
>
>/*****All programmers are playwrights and all computers are lousy actors.
>             -- Unknown*****/