|
Ä¿ÇÇÇâÀÌ ³ª´Â *NIX
Ä¿ÇǴнº
½Ã½ºÅÛ/³×Æ®¿÷/º¸¾ÈÀ» ´Ù·ç´Â °÷
|
|
|
|
ÀÌÀü ÁÖÁ¦ º¸±â :: ´ÙÀ½ ÁÖÁ¦ º¸±â |
±Û¾´ÀÌ |
¸Þ½ÃÁö |
°¡ºü¯ ¼Õ´Ô
|
¿Ã·ÁÁü: 2004.4.26 ¿ù, 3:14 pm ÁÖÁ¦: procmailÀ» ¼³Á¤ Çߴµ¥¿ä... ¹°À½Ç¥¸¸ µé¾î °¡¸é ½ºÆÔÀ¸·Î ó¸® |
|
|
procmailrcÀÇ ¼³Á¤Àº ¾Æ·¡¿Í °°½À´Ï´Ù.
# LOGFILE=/var/log/procmail
VERBOSE=no
PATH=/usr/bin:/usr/local/bin:/bin
SHELL=/bin/sh
#ÀÎÄÚµåµÇ¾î ³¯¾Æ¿À´Â Çì´õ¸¦ µðÄÚµå ÇÏ´Â ºÎºÐ.
:0 Efhw
*^(Subject|From|Cc):.*=\?EUC-KR\?(B|Q)\?
|formail -c | hcode -dk -m
:0 Efhw
*^(Subject|From|Cc):.*=\?ks_c_5601-1987\?(B|Q)\?
|formail -c | hcode -dk -m
#Á¦¸ñºÎºÐ¿¡ ÁöÁ¤µÈ ¹®ÀÚ¿ÀÌ °É¸®¸é, spam°èÁ¤À¸·Î ¸ÞÀÏÀü¼Û
:0
* ^Subject:.*(=B1=A4=B0=ED|PLGk|È«º¸|±¤°í|saSw7Q==|sO0p|PMir|KLGk|<È«|KMir|W7Gk|sO1d|W8irurhd|W8ir|urhd|sO0uXQ==|[±¤|°í])
/var/spool/mail/spam
:0
* ^Subject: .*[sS][eE][xX]|.*[Pp][Oo][rR][Nn]|.*[Vv][Ii][aA][gG][rR][aA]|.*[Dd][rR][uU][gG]|.*[pP][eE][nN][Ii][sS]|.*[mM][oO][rR][tT][aA][gG][eE]
/var/spool/mail/spam
:0
* ^Subject: .*Æ÷.*¸£.*³ë|.*»ö.*°ñ|.*¾ß.*½Ã|.*¸ñ.*·Ï|.*¸®.*½º.*Æ®|.*¼º.*ÀÎ|.*¸ô.*Ä«|.*´ë.*Ãâ|.*º¸.*Çè|.*¹«.*·á|.*ºÎ¾÷|.*°æÇ°|.*¸¸È|.*´ÙÀÌ¾îÆ®
/var/spool/mail/spam
:0
* ^Subject: .*(±¤°í|È«º¸|±¤-°í|¸ñ·ÏÀÔ´Ï´Ù|¸®½ºÆ®ÀÔ´Ï´Ù|¼ºÀÎÁ¤º¸|¸ôÄ«)
/var/mail/spam
:0
* ^Subject: .*\[±¤.*°í\]
/var/mail/spam
:0
* ^Subject: .*\[ÎÆ.*ͱ\]
/var/mail/spam
:0B:
* (Á¤ÅëºÎ|¼ö½Å°ÅºÎ)
/var/spool/mail/spam
:0
* ^Subject: .*\[È«.*º¸\]
/var/mail/spam
:0
* ^Subject: .*\(±¤.*°í\)
/var/mail/spam
:0
* ^(To|Cc):.*undisclosed-recipients
/dev/null
:0
* ^Subject:.*(»ç¹ßÅë¹®|´ç÷À»|Pyongyang|à÷ìÑ|zsY=|ADV|È«*|Ä¿ÇøµÀ̺¥Æ®|saSw7V|¼ºÀÎ|28=C8=AB|=3C=B1=A4|=28=B1=A4=B0=ED=29|=C8=AB=BA=B8|=5B=B1=A4|=28=C8=AB=BA=B8=29|=28=B1=A4|=B1=A4=B0=ED|PLGk|È«º¸|±¤°í|saSw7Q==|sO0p|PMir|KLGk|<È«|KMir|W7Gk|sO1d|W8irurhd|W8ir|urhd|sO0uXQ==|[±¤|°í])
/var/spool/mail/spam
:0
* ^Subject: .*\(È«.*º¸\)
/var/mail/spam
:0
* ^Subject: .*\(ÎÆ.*ͱ\)
/var/mail/spam
# MyDoom(MiMail) Virus Filtering ##############
# Hi Á¦¸ñÀÇ ¸ÞÀÏÀ» ÇÊÅ͸µ
:0 EH
* ^Subject: Hi$
/var/spool/mail/spam
# Test Á¦¸ñÀÇ ¸ÞÀÏÀ» ÇÊÅ͸µ
:0 EH
* ^Subject: Test$
/var/spool/mail/spam
# Hello Á¦¸ñÀÇ ¸ÞÀÏÀ» ÇÊÅ͸µ
:0 EH
* ^Subject: Hello$
/var/spool/mail/spam
# Status Á¦¸ñÀÇ ¸ÞÀÏÀ» ÇÊÅ͸µ
:0 EH
* ^Subject: Status$
/var/spool/mail/spam
# Server Report Á¦¸ñÀÇ ¸ÞÀÏÀ» ÇÊÅ͸µ
:0 EH
* ^Subject: Server Report$
/var/spool/mail/spam
# Mail Transaction Failed Á¦¸ñÀÇ ¸ÞÀÏÀ» ÇÊÅ͸µ
:0 EH
* ^Subject: Mail Transaction Failed$
/var/spool/mail/spam
# Mail Delivery System Á¦¸ñÀÇ ¸ÞÀÏÀ» ÇÊÅ͸µ
:0 EH
* ^Subject: Mail Delivery System$
/var/spool/mail/spam
# .exe, .EXE, .scr, .SER, .pif, .PIF È®ÀåÀÚ Ã·ºÎ ÆÄÀÏÀ» ÇÊÅ͸µ
:0 EB
* ^Content-Disposition: attachment;
* ^.*(file)?name=.*.(exe|EXE|scr|SCR|pif|PIF|asd|chm|dll|ocx|hlp|hta|js|shb|shs|vb|vbe|vbs|wsf|wsh)"?$
/var/spool/mail/spam
# fuscedf.zip ÆÄÀϰú body.zip À¸·Î ÷ºÎµÇ´Â ¸ÞÀÏÀ» ÇÊÅ͸µ
:0 EB
* ^Content-Disposition: attachment;
* ^.*(file)?name=.*(fuscedf.zip|body.zip)"?$
/var/spool/mail/spam
SPAM_LOG = "/var/spool/mail/spam"
:0HBw
* > 70000
* < 120000
* ^Subject:.(Re:.)*(Thank you!|Your details|Details|My details|Approved|Your application|Wicked screensaver|That movie)
* [.pif|.scr]
* the attached file for details
$SPAM_LOG
POISONED_EXECUTABLES=/etc/procmail/poisoned
SECURITY_NOTIFY="postmaster, security-dude"
SECURITY_NOTIFY_VERBOSE="virus-checker"
SECURITY_NOTIFY_SENDER=/etc/procmail/local-email-security-policy.txt
SECRET="CHANGE THIS"
# this file must already exist, with proper permissions (rw--w--w-):
SECURITY_QUARANTINE=/var/spool/mail/quarantine
POISONED_SCORE=100
SCORE_HISTORY=/var/log/macro-scanner-scores
DROPPRIVS=YES
LOGFILE=$HOME/procmail.log
# Finished setting up, now run the sanitizer...
INCLUDERC=/etc/procmail/html-trap.procmail
# Reset some things to avoid leaking info to
# the users...
POISONED_EXECUTABLES=
SECURITY_NOTIFY="sukhyuni98@nate.com"
SECURITY_NOTIFY_VERBOSE=
SECURITY_NOTIFY_SENDER=YES
SECURITY_QUARANTINE=
¿©±â¼ ¾î´ÀºÎºÐÀÌ ¹°À½Ç¥°¡ µé¾î°¡¸é ½ºÆÔÀ¸·Î °É·¯Áö°Ô ÇÏ´Â °ÍÀϱî¿ä?
Àú´Â ¾Æ¹«¸® ã¾ÆºÁµÎ ±×·± ºÎºÐÀº ¾ø´Â°Å °°´øµ¥¿©...
°í¼ö´Ôµé ÇѼö ºÎʵ右´Ï´Ù. |
|
À§·Î |
|
 |
|
|
»õ·Î¿î ÁÖÁ¦¸¦ ¿Ã¸± ¼ö ¾ø½À´Ï´Ù ´ä±ÛÀ» ¿Ã¸± ¼ö ¾ø½À´Ï´Ù ÁÖÁ¦¸¦ ¼öÁ¤ÇÒ ¼ö ÀÖ½À´Ï´Ù ¿Ã¸° ±ÛÀ» »èÁ¦ÇÒ ¼ö ¾ø½À´Ï´Ù ÅõÇ¥¸¦ ÇÒ ¼ö ¾ø½À´Ï´Ù
|
Powered by phpBB © 2001, 2005 phpBB Group
|