email attack

[Jason Joines]

Shawn L Johnston wrote:
> On Mon, 2003-09-22 at 12:39, Jason Joines wrote:
> 
>>Chris Kassopulo wrote:
>>
>>>Greetings,
>>>
>>>For the last two days I've gotten 100's of emails containing exe files.
>>>Bogus microsoft updates and patches.  Each piece is around 150k which
>>>makes for a long download on dialup.  Are there any filters that can
>>>delete emails at the server that have an exe attached.
>>>
>>>I can put up with a little spam, but this is out of control.
>>>
>>>TIA
>>>
>>>Chris
>>
>>
>>   I had this same problem, then checked the procmail mailing list 
>>(nntp://news.gmane.org/gmane.mail.procmail) to see if anyone had a good 
>>recipe for it.
>>   I created a mail folder called null that is just a symbolic link to 
>>/dev/null and used this recipe that works great.
>>
>># swen
>>:0 B:
>>* 
>>^ZGUuDQ0KJAAAAAAAAAB\+i6hSOurGATrqxgE66sYBQfbKATvqxgG59sgBLerGAdL1zAEA6sYBWPXV
>>null
>>
> 
> 
> I've been seeing this as well, around 600 emails since Thursday evening,
> and our email server is slowing down because of it... Would running a
> procmail script like this actually help the server deal with the
> excessive traffic though?
> 
> Shawn

   I think it would help a bit.  Instead of having to process hundreds 
of ~150Kb messages and append them to the end of mail files, it just 
sends them into oblivion.