full-disclosure - Filtering sobig with postfix

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <DF79BE12AF8DD344B107D0D03621E5750ED9C3@kermit.corp.hansenet.com>
From: vogt at hansenet.com (vogt@...senet.com)
Subject: Filtering sobig with postfix

Spamfilters are nice, but by then the stuff's already wasted transfer and
harddisk space. I've found a way to teach my postfix to reject any incoming
sobig mails:

in main.cf, enable "body_checks = (filename)". In that (filename) file,
write a regular expression matching sobig, e.g. something like

/see attached file for details/	REJECT

ever since, I've not had a single one coming through.

best regards / mit freundlichen Gruessen,

Tom Vogt
Hansenet Webfarm Security