Amos Gouaux <[EMAIL PROTECTED]> écrivait (wrote) :
> >>>>> On Sun, 29 Jul 2001 10:36:43 -0700,
> >>>>> Nick Sayer <[EMAIL PROTECTED]> (ns) writes:
>
> ns> Is there no way for the sieve to match on lines in the body? This
> ns> would be the next extension I would like to see.
>
> But this would not be global. Seems to me it would be much better
> to have the MTA handle this before it even reaches this stage.
And for that particular worm there's no need to match the body :
/etc/procmailrc :
:0
* ^Content-Disposition: Multipart message
/var/log/spam/sircam
The Content-Disposition: Multipart message is incorrect. No false-positive
in more than one week on an university server.
Jean Charles
--
Jean Charles Delépine - Équipe Réseaux Télécoms - Université de Picardie
