Spamassassin a rula na zip v priloze

[Karel Zak]

On Mon, Feb 02, 2004 at 06:28:32PM +0100, David Janko wrote:
> Zdravim,
> nevi nekdo jak napsat vyse uvedenou rulu ? Dival jsem se na:
> rawbody  MICROSOFT_EXECUTABLE   eval:check_for_mime('microsoft_executable')
> describe MICROSOFT_EXECUTABLE   Message includes Microsoft executable
> program
> # todo: better tflags category for these tests
> tflags MICROSOFT_EXECUTABLE userconf

 Trosku jsem hledal na googlu a:

header MICROSOFT_ZIPPEDEXE Content-Type =~ /application\/x-compressed;.+name=".+.zip"/i
describe MICROSOFT_ZIPPEDEXE possibly ZIP'ed Microsoft Windows virus
score MICROSOFT_ZIPPEDEXE 7.0

 todle je myslim celkem pochopitelne.

 
> ale nejak sem z toho nepochopil kde se to specifikuje to
> microsoft_executable ...

 Ja take ne...

    Karel

-- 
 Karel Zak  <zakkr na zf.jcu.cz>
 http://home.zf.jcu.cz/~zakkr/