[Full-Disclosure] Filtering sobig with postfix

[vogt@hansenet.com]

Spamfilters are nice, but by then the stuff's already wasted transfer and
harddisk space. I've found a way to teach my postfix to reject any incoming
sobig mails:

in main.cf, enable "body_checks = (filename)". In that (filename) file,
write a regular expression matching sobig, e.g. something like

/see attached file for details/	REJECT

ever since, I've not had a single one coming through.



best regards / mit freundlichen Gruessen,

Tom Vogt
Hansenet Webfarm Security 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html