Re: SA and Amavisd-new 2.5.0

2007-05-15 Thread Mark Martinec
Jerry, I understand they're not true virus files, but the default value of 0.1 is way low and was causing them to be passed on to users. It seems the SA rules to catch these should be in the standard set. Release notes suggest a set of SA rules to match these. Although high scores can be

Re: SA and Amavisd-new 2.5.0

2007-05-15 Thread Jerry Durand
On May 15, 2007, at 2:44 AM, Mark Martinec wrote: Release notes suggest a set of SA rules to match these. ok, I put the maps back to 0.1 and put those rules in local.cf

SA and Amavisd-new 2.5.0

2007-05-14 Thread Jerry Durand
I was reviewing our mail logs and saw items marked as virus infected being delivered to our users with only a junk mail warning. Not good! I investigated and found it's a new feature of Amavisd. You can now set a list of infections that are reclassified as spam. I don't have a problem

RE: SA and Amavisd-new 2.5.0

2007-05-14 Thread Michael Scheidell
Not 100% sure I would call this a surprise, as it was discussed on the amavisd-new list and is in README. (and you should join the amavisd-new list where issues like this are discussed since they are not dependent on SA) -- Michael Scheidell, CTO Join Me at SecureWorld Philadelphia May 17 for

Re: SA and Amavisd-new 2.5.0

2007-05-14 Thread Jerry Durand
Sorry for the posting on this list, someone mentioned that even though the man for amavisd is essentially empty, this feature is mentioned elsewhere. I only recently got on the amavisd-new announce list so didn't see anything about it. I just don't like seeing users getting mail with low

RE: SA and Amavisd-new 2.5.0

2007-05-14 Thread Michael Scheidell
-Original Message- From: Jerry Durand [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 15, 2007 1:00 AM To: Jerry Durand Cc: users@spamassassin.apache.org Subject: Re: SA and Amavisd-new 2.5.0 Sorry for the posting on this list, someone mentioned that even though the man

Re: SA and Amavisd-new 2.5.0

2007-05-14 Thread Bill Landry
Jerry Durand wrote the following on 5/14/2007 10:00 PM -0800: Sorry for the posting on this list, someone mentioned that even though the man for amavisd is essentially empty, this feature is mentioned elsewhere. I only recently got on the amavisd-new announce list so didn't see anything about

Re: SA and Amavisd-new 2.5.0

2007-05-14 Thread Jerry Durand
On May 14, 2007, at 10:46 PM, Bill Landry wrote: These are not actually infected message, per say (virus, malware, trojan, etc), they are phish, scan, spam type messages. You can increase the score for these messages either within amavisd.config (these scores will get added to the overall SA