email attack

[Shawn L Johnston]

On Mon, 2003-09-22 at 12:39, Jason Joines wrote:
> Chris Kassopulo wrote:
> > Greetings,
> > 
> > For the last two days I've gotten 100's of emails containing exe files.
> > Bogus microsoft updates and patches.  Each piece is around 150k which
> > makes for a long download on dialup.  Are there any filters that can
> > delete emails at the server that have an exe attached.
> > 
> > I can put up with a little spam, but this is out of control.
> > 
> > TIA
> > 
> > Chris
> 
> 
>    I had this same problem, then checked the procmail mailing list 
> (nntp://news.gmane.org/gmane.mail.procmail) to see if anyone had a good 
> recipe for it.
>    I created a mail folder called null that is just a symbolic link to 
> /dev/null and used this recipe that works great.
> 
> # swen
> :0 B:
> * 
> ^ZGUuDQ0KJAAAAAAAAAB\+i6hSOurGATrqxgE66sYBQfbKATvqxgG59sgBLerGAdL1zAEA6sYBWPXV
> null
> 

I've been seeing this as well, around 600 emails since Thursday evening,
and our email server is slowing down because of it... Would running a
procmail script like this actually help the server deal with the
excessive traffic though?

Shawn