Procmail recipe for the SoBig worm

[giza]

In case anyone wants to do some filtering of SoBig, which is (still) making the rounds, the following procmail filter will delete all incoming e-mails with the worm:

#
# Filter for the SoBig worm
#
:0
* ^X-MailScanner: Found to be clean
* ^Content-Type: multipart/mixed
/dev/null

Share and enjoy! (Mad props go to Laura Atkins of The SpamCon Foundation, who originally sent it to me)