[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[plamo:16563] Re: spam

----+----1----+----2----+----3----+----4----+----5----+----6----+----7

MOUE です。

〜≫ in reply to your mail below ≪〜
From: 辰己丈夫 <tatsumi@qef.h.kobe-u.ac.jp>
Subject: [plamo:16555] Re: spam (Re: Re: Mew)
Date: Mon, 18 Nov 2002 14:20:25 +0900

> >   .procmailrc に次のような行を入れるとそのまま使える
> > はずです。
> > 
> > INCLUDERC=$HOME/spamlist.txt
> 
> お、それは知りませんでした。どうもありがとうございます。

私もです、こういう使い方ができるんですね。
うちでも procmail で刎ねてますが、spam 以外に virus も刎ねる
ことができてたりします。

http://tlec.linux.or.jp/docs/procmailrc
あたりを参考にして、

落し先はこんな感じにしてますが、
SPAM=$HOME/spam.txt
VIRUS=$HOME/virus.txt

############################
# W95.Hybris.gen

:0:
* Content-Type:.*multipart/mixed;.*boundary="--VE
* Return-Path:.*<>
* !^To:.*@
$VIRUS
:0:
* Content-Type:.*multipart/mixed;.*boundary="--VE
* !^From:.*@
* !^To:.*@
$VIRUS

############################
# W32.Sircam.Worm@mm

:0:
* X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
* X-Mailer: Microsoft Outlook Express 5.50.4133.2400
* Content-Type: multipart/mixed; boundary=.----[0-9A-F]*_Outlook_Express_message_boundary
$VIRUS

:0:
* Content-type:.*MULTIPART/MIXED;.*BOUNDARY=.*Boundary_\(ID_
$VIRUS

################################
# W32.Aliz.Worm

:0B:
* ^--bound
* ^Content-Type: text/html;
* ^Content-Type: audio/x-wav;
*   *name="whatever.exe"
* ^Content-ID: <SOMECID>
* <iframe
$VIRUS

############################
# W32.Badtrans.B@mm

:0:
* ^Received: from aol.com
* ^Content-Type: multipart/related;
*        type="multipart/alternative";
*        boundary="====_ABC1234567890DEF_===="
$VIRUS
:0B:
* ^<iframe
* ^Content-Type: audio/x-wav;
$VIRUS
:0:
* ^MIME-Version: 1.0Content-Type: multipart/related;     type="multipart/alternative";   boundary="====_ABC1234567890DEF_===="X-Priority: 3X-MSMail-Priority: NormalX-Unsent: 1
$VIRUS

############################
# W32.Myparty@mm

:0
* ^Subject: new photos from my party!
* !^Content-Type:
* !^Mime-Version: 1.0
{
   :0B:
   * ^begin 666 www.myparty.yahoo.com
   * ^I```````````````````````````````````````````````````````%
   $VIRUS
}

############################
# W32.Klez.e@MM

:0H
* ^Content-Type: multipart/alternative.*boundary=[A-Za-z0-9]
{
   :0B:
   * ^Content-Type: text/html;
   * ^Content-Transfer-Encoding: quoted-printable
   * ^<HTML><HEAD></HEAD><BODY>
   * ^<iframe src=3Dcid:.*height=3D0 width=3D0>
   * ^Content-Type: audio/x-midi;
#   * name=*.pif
   * ^TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
   $VIRUS
}
:0H
 * ^Content-Type: multipart/alternative.*boundary=[A-Za-z0-9]*$
{
   :0B:
   * ^Content-Type: text/html;
   * ^Content-Transfer-Encoding: quoted-printable
   * ^<HTML><HEAD></HEAD><BODY>
   * ^<iframe src=3Dcid:.*height=3D0 width=3D0>
   * ^TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
   * ^AAAAAAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4g
   * ^RE9TIG1vZGUuDQ0KJAAAAAAAAACYl33g3PYTs9z2E7Pc9hOzp\+ofs9j2E7Nf6h2zz/YTszTp
   $VIRUS
}
:0H
 * ^Content-Type: multipart/alternative.*boundary=[A-Za-z0-9]*$
{
   :0B:
   * ^Content-Type: text/html;
   * ^Content-Transfer-Encoding: quoted-printable
   * ^<HTML><HEAD></HEAD><BODY>
   * ^--[A-Za-z0-9].*
   * ^Content-Type: application/octet/stream; name=*.pif
   * ^Content-Transfer-Encoding: base64
   * ^TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
   * ^AAAAAAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4g
   * ^RE9TIG1vZGUuDQ0KJAAAAAAAAACYl33g3PYTs9z2E7Pc9hOzp\+ofs9j2E7Nf6h2zz/YTszTp
   $VIRUS
}


以下のレシピは、Subject:！広告！を刎ねるものなんですが、うちでは
うまく動きません。
どうも MATCH への受渡しでこけるようなんですね。
どのあたりがまずいのか、ご存知のかたはいらっしゃいますか。

:0
* ^Subject:.*ISO-2022-JP
* ^Subject:.*\/.*
* ? echo "$MATCH" | nkf -Zme | egrep '(!|！)( |　)*広告( |　)*(!|！)'
$SPAM

:0H:
* ^Subject: \/.*
* ? echo "$MATCH" | /usr/bin/nkf -Zme | /usr/bin/grep '!.*広告.*!'
$SPAM

-- 
+----------+----------+----------+----------+----------+
MOUE                  << Plamo Linux >>
kmoue@sky-mue.jp
kmoue@plamo.linet.gr.jp  << Plamo Documentation Project >>
zebra7@seagreen.ocn.ne.jp
Follow-Ups
[plamo:16565] Re: spam, 辰己丈夫
[plamo:16573] Re: spam, R4000 2.2
References
[plamo:16550] Re: spam (Re: Re: Mew), 辰己丈夫
[plamo:16554] Re: spam (Re: Re: Mew), Jun Kuwamura
[plamo:16555] Re: spam (Re: Re: Mew), 辰己丈夫
[検索ページ] [メール一覧]
Plamo ML 公開システム