From: Gavin Sinclair Date: 2003-09-23T14:19:38+09:00 Subject: Re: POP3Filter for SoBig.F Virus: > > "Austin Ziegler" wrote: > >> I've made more updates. Rather than just putting them here, I've >> created a page at RubyGarden: >> >> http://www.rubygarden.org/ruby?SoBigPopper >> > > > Thanks so much, Austin (and other contributors) > for putting this together. > > > daz > > (68MB backlog now cleared) A word of warning: don't set the size threshold too small. Yesterday, I ran the following script (at home) all day while I was at work: while [ true ]; do yes | ruby pop3filter.rb sleep 300 done That guarded my inbox just nicely so I could check it at work. Today, having noticed that quite a few small (1-2K) annoying Microsoft emails were coming through, I lowered the size threshold to 1500 bytes. Until I rang home to get it stopped, no mail was getting through to me! For some reason, every email was matched, and thus killed, by the program! Until I get home to see what happened, I won't know what emails I missed out on. Cheers, Gavin