Stories
Slash Boxes
Comments
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

use Perl Log In

Log In

[ Create a new account ]

mattriffle (357)

mattriffle
  (email not shown publicly)
http://www.mattriffle.com/

Matt Riffle [mattriffle.com]
Exec. VP of Technology
pair Networks, Inc. [pair.com]

All opinions are mine only. I speak only for myself.

Journal of mattriffle (357)

Wednesday March 03, 2004
09:56 AM

W32/Bagle.j@MM SpamAssassin Rules

[ #17740 ]
These are admittedly not pretty (or condensed as much as they could be), but they work:

http://www.jennandmatt.com/misc/bagle/

On a post formatting note: is there any way I'm missing to do something similar to <pre> tags in a post? I couldn't get the rules to format correctly inline, hence the URL.

-Matt

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login | Reply
Loading... please wait.
  • Message-ID matches
    <[a-z]{19}@
    --
    • Randal L. Schwartz
    • Stonehenge
  • Can't use <pre> tags because someone might screw up the formatting of a page by posting a comment that's one big long line. Really has more to do with Slashdot users than it being a real problem on use.perl.org.

    What you want is <ecode>.

    header   BAGLE_WORM_SUBJ1  Subject =~ /E-?mail account (security|utilization|disabling) warning\./
    describe BAGLE_WORM_SUBJ1  Virus - Appears to be the W32/Bagle.j@MM worm
    score    BAGLE_WORM_SUBJ1  5

    header   BAGLE_W