Can bogofilter filter Swen

[David Relson]

On Tue, 23 Sep 2003 19:53:09 +0200
Stefan Bellon <sbellon at sbellon.de> wrote:

> Stephen Liu wrote:
> 
> [snip]
> 
> > I am searching hard for a solution.  Kindly advise can bogofilter do
> > the job?
> 
> Every Swen was caught by my bogofilter installation. However, this is
> time consuming as each Swen is between 140 and 165 KB in size.
> 
> There's another way of filtering Swen more efficiently. Put the
> following inside your .procmailrc and already procmail takes care of
> it:
> 
> :0
> * > 140000
> * < 165000
> {
> :0 BD
> *
> b3IAAABBZG1pbgAAAEdFVCBodHRwOi8vd3cyLmZjZS52dXRici5jei9iaW4vY291bnRlc
> i5naWYv/dev/null
> }
> 
> That string is a base64-encoded part of the executable itself.
> 
> -- 
> Stefan Bellon

Stefan,

This is wonderful!  I had the "*" and "b3IAA..." on separate lines, so
procmail created a "b3IAA..." mailbox and was putting the virii there. 
The details are, as ever, important.

Thank you.

David