1. /etc/sendmail.cf ¿¡ ¾Æ·¡ºÎºÐ Ãß°¡

# Worm, Virus Filtering Ruleset

HSubject: $>check_subject

D{SOBIG} "Your message may contain the Sobig Worm. See http://www.certcc.or.kr/cvirc/Alert/warning/2003/Win32_Sobig_worm_F.html"

Scheck_subject

# W32.Sobig.E@mm Worm Virus
R$*Re: Thank you!$* $#error $: 550 ${SOBIG}
R$*Thank you!$* $#error $: 550 ${SOBIG}
R$*Your details$* $#error $: 550 ${SOBIG}
R$*Re: Details$* $#error $: 550 ${SOBIG}
R$*Re: Re: My details$* $#error $: 550 ${SOBIG}
R$*Re: Approved$* $#error $: 550 ${SOBIG}
R$*Re: Your application$* $#error $: 550 ${SOBIG}
R$*Re: Wicked screensaver$* $#error $: 550 ${SOBIG}
R$*Re: That movie$* $#error $: 550 ${SOBIG}

2. /etc/sendmail.cf ¿¡ ¾Æ·¡ºÎºÐ Ãß°¡

#### Sobig.worm
HSubject: $>Check_Sobig
D{Sobigmsg}Access Denied - This message may contain a virus.

SCheck_Sobig
RThank you! $#error $: 550 ${Sobigmsg}
RYour details $#error $: 550 ${Sobigmsg}
RRe: Thank you! $#error $: 550 ${Sobigmsg}
RRe: Details! $#error $: 550 ${Sobigmsg}
RRe: Re: My details $#error $: 550 ${Sobigmsg}
RRe: Approved $#error $: 550 ${Sobigmsg}
RRe: Your application $#error $: 550 ${Sobigmsg}
RRe: Wicked screensaver $#error $: 550 ${Sobigmsg}
RRe: That movie $#error $: 550 ${Sobigmsg}

3. /etc/sendmail.cf ¿¡ ¾Æ·¡ºÎºÐ Ãß°¡

#### Sobig.worm
HX-MailScanner: $>Check_Sobig
D{Sobigmsg}Access Denied - This message may contain a virus.

SCheck_Sobig
RFound to be clean $#error $: 550 ${Sobigmsg}