shunting virus spam

[brian]

A bit of my .procmailrc... You could change the size part to only scan
messages less than 150K and/or add some bang qualifiers to skip those
messages based on subject or other criteria.  Dunno if this helps or
not.

INCLUDERC=/etc/procmailrc
DROPPRIVS=yes

:0fw:
* < 500000
* ! From:.*(@axsne.com|@nstarch.com|jdsusers.com|@reports.spamcop.net)
* ! To:abuse*(@commrail.net, @axsne.com)
| /usr/bin/spamassassin


:0:
* ^X-Spam-Level: \*\*\*\*\*\*
almost-certainly-spam


On Tue, 2003-10-21 at 14:41, Rodent of Unusual Size wrote:
> does anyone have any /etc/procmailrc rules that will
> recognise these bloody 150K virus spams so they can be
> shunted aside before spamassassin starts wasting time
> on them?  they're killing my system..
-- 
brian <lists at karas.net>