Noel Jones wrote the following on 5/18/2007 3:37 PM -0800: > At 05:28 PM 5/18/2007, Bill Landry wrote: > >> Noel Jones wrote the following on 5/18/2007 3:14 PM -0800: >> >>> At 04:49 PM 5/18/2007, Bill Landry wrote: >>> >>> >>>> Well, this was not a good solution: >>>> >>>> @keep_decoded_original_maps = (new_RE( >>>> qr'^MAIL$', # retain full original message for virus checking (can >>>> be slow) >>>> >>>> as this had the effect of quarantining everything that SaneSecurity and >>>> MSRBL detected, including spam, phish, image, scam, etc., and not just >>>> malware. :-( >>>> >>>> Any other suggestions? Thanks, >>>> >>>> >>> I think your @virus_name_to_spam_score_maps is somehow >>> wrong. Scanning the raw email doesn't change the result text >>> >> from clamdscan. >> >>> >> Other than score changes, it's identical to what can be found in the >> amavis.conf-default included with the distro: >> >> @virus_name_to_spam_score_maps = >> (new_RE( [ qr'^(Email|HTML)\.(Phishing|Spam|Scam[a-z0-9]?)\.'i => 1.5 ], >> [ qr'^(Email|Html)\.Malware\.Sanesecurity\.' => undef ], >> [ qr'^(Email|Html)(\.[^., ]*)*\.Sanesecurity\.' => 1.5 ], >> [ qr'^(MSRBL-Images/|MSRBL-SPAM\.)' => 1.5 ], >> )); >> >> Let me know if you see anything wrong here... >> > > I don't see any obvious problems above. You don't happen to have > @virus_name_to_spam_score_maps defined more than once, do you? > > maybe Mark has other suggestions. > > No, it's only defined once:
grep "virus_name_to_spam_score_maps" /etc/amavisd.conf @virus_name_to_spam_score_maps = Thanks for the feedback! Bill ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
