9fans - fans of the OS Plan 9 from Bell Labs
 help / color / mirror / Atom feed
* [9fans] pipeto for mydoom virus
@ 2004-01-27 16:01 steve-simon
  2004-01-27 17:49 ` Matthias Teege
  2004-01-27 19:56 ` Richard Miller
  0 siblings, 2 replies; 5+ messages in thread
From: steve-simon @ 2004-01-27 16:01 UTC (permalink / raw)
  To: 9fans

[-- Attachment #1: Type: text/plain, Size: 277 bytes --]

Hi,

A pipeto clause to strip the mydoom virus.

Add rot13 to /386/bin (attached) and the below to your pipeto

if ( test -f $D/2/body && ! ~ `{unzip -sc < $D/2/body | rot13 | grep 'Version\\Explorer'} '' ){
	log virus $RECIP From `{cat $D/replyto}
	exit 0
}

-Steve

[-- Attachment #2: rot13.c --]
[-- Type: text/plain, Size: 431 bytes --]

#include <u.h>
#include <ctype.h>
#include <libc.h>
#include <bio.h>

Biobuf bin, bout;

int main()
{
	long got;
	char buf[1024], *p;

	Binit(&bin, 0, OREAD);
	Binit(&bout, 1, OWRITE);

	while((got = Bread(&bin, buf, sizeof(buf))) > 0){
		for (p = buf; p < buf + got; p++)
			if (isalpha(*p))
				if (tolower(*p) <= 'm')
					*p += 13;
				else
					*p -= 13;
		Bwrite(&bout, buf, got);
	}
	Bterm(&bout);
}

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [9fans] pipeto for mydoom virus
  2004-01-27 16:01 [9fans] pipeto for mydoom virus steve-simon
@ 2004-01-27 17:49 ` Matthias Teege
  2004-01-27 19:56 ` Richard Miller
  1 sibling, 0 replies; 5+ messages in thread
From: Matthias Teege @ 2004-01-27 17:49 UTC (permalink / raw)
  To: 9fans

> if ( test -f $D/2/body && ! ~ `{unzip -sc < $D/2/body | rot13 | grep 'Version\\Explorer'} '' ){
> 	log virus $RECIP From `{cat $D/replyto}
> 	exit 0
> }

Where comes the log command from? I cant find
this?

Matthias


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [9fans] pipeto for mydoom virus
  2004-01-27 16:01 [9fans] pipeto for mydoom virus steve-simon
  2004-01-27 17:49 ` Matthias Teege
@ 2004-01-27 19:56 ` Richard Miller
  2004-01-27 19:59   ` Scott Schwartz
  2004-01-27 22:52   ` a
  1 sibling, 2 replies; 5+ messages in thread
From: Richard Miller @ 2004-01-27 19:56 UTC (permalink / raw)
  To: 9fans

> A pipeto clause to strip the mydoom virus.

Wouldn't it be better if the 9fans list server didn't forward the things
in the first place?  An ounce of prevention ...



^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [9fans] pipeto for mydoom virus
  2004-01-27 19:56 ` Richard Miller
@ 2004-01-27 19:59   ` Scott Schwartz
  2004-01-27 22:52   ` a
  1 sibling, 0 replies; 5+ messages in thread
From: Scott Schwartz @ 2004-01-27 19:59 UTC (permalink / raw)
  To: 9fans

| Wouldn't it be better if the 9fans list server didn't forward the things
| in the first place?  An ounce of prevention ...

It's not supposed to!  We supposedly have spamassassin and other stuff
on the job.



^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [9fans] pipeto for mydoom virus
  2004-01-27 19:56 ` Richard Miller
  2004-01-27 19:59   ` Scott Schwartz
@ 2004-01-27 22:52   ` a
  1 sibling, 0 replies; 5+ messages in thread
From: a @ 2004-01-27 22:52 UTC (permalink / raw)
  To: 9fans

// An ounce of prevention ...

yes, but i have a plan9 mail server with at least an occasional
windows user pulling from it. i'd like to get a server-wide
filter in.

but then, i've got one such user only, and i can't really be
bothered protecting windows anyway...
ア


^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2004-01-27 22:52 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2004-01-27 16:01 [9fans] pipeto for mydoom virus steve-simon
2004-01-27 17:49 ` Matthias Teege
2004-01-27 19:56 ` Richard Miller
2004-01-27 19:59   ` Scott Schwartz
2004-01-27 22:52   ` a

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).