Mail virus with Procmail-gateway filter (2)

Source: Internet
Author: User
Tags filter chmod log mail touch file permissions

6, determine the file permissions

The following are the referenced contents:
Touch/var/log/procmail.log <--When the file doesn't exist.
chmod 644/var/log/procmail.log
Touch/var/spool/mail/quarantine <--When the file doesn't exist.
chmod 644/var/spool/mail/quarantine
Touch/var/log/scores <--When the file doesn't exist.
chmod 644/var/log/scores

7. Modify PROCMAILRC

The following are the referenced contents:

Vi/etc/procmailrc
The sample file is as follows:
Maildir=/var/mail
Verbose=off
Path= "/usr/bin: $PATH:/usr/local/bin"
#Nimda Virus
: 0 Bh
* ^CONTENT-TYPE:AUDIO/X-WAV;
* name= "Readme.exe"
/dev/null

Shell=/bin/sh
Poisoned_executables=/etc/procmail/poisoned-files
#寄信通知系统管理者, if you need more people, please add a comma after postmaster and enter your email
security_notify= "Postmaster"
#系统通知讯息发布人
Security_notify_verbose= "Postmaster"
#寄信通知寄件人
Security_notify_sender=yes
#寄信通知寄件人讯息内容
Security_notify_sender= "/etc/procmail/policy.txt"
#寄信通知给收件人的讯息内容
Security_notify_recipient= "/etc/procmail/quarantined.txt"
#可放20字长度以下字符随机数值, increased security
secret= "Sfd9734965q34o2ldgbl"
#检疫隔离信件文件位置
Security_quarantine=/var/spool/mail/quarantine
#宏病毒扫描积分门坎, generally, poisoning letters usually score more than 100 points.
poisoned_score=100
#宏病毒扫描日志文件位置
Score_history=/var/log/scores
Logfile=/var/log/procmail.log
Includerc=/etc/procmail/html-trap.procmail



Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.