On 10/16/09, Mark Martinec <mark.martinec+ama...@ijs.si> wrote:
> Ricardo,
>
> > The latest version added several virus_name_to_spam_score_maps.
> > Does anyone have a corresponding spamassassin config file?
> > The one from the list archives (amavis-sanesecurity_v2.cf) is missing
> > several of the recently added ones, including safebrowsing.
> > Don't want to reinvent the wheel..
>
> Here is what I'm using at the moment:
>
> header L_AV_Phish X-Amavis-AV-Status =~
> m{\bAV:(Email|HTML)\.Phishing\.}i
> header L_AV_Spam X-Amavis-AV-Status =~ m{\bAV:Email\.Spammail}i
> header L_AV_PhishHeur X-Amavis-AV-Status =~ m{\bAV:Phishing\.Heuristics\.}i
> header L_AV_SS_PhishBar X-Amavis-AV-Status =~ m{\bAV:Sanesecurity_PhishBar_}
> header L_AV_SS_Phish X-Amavis-AV-Status =~ m{\bAV:Sanesecurity\.Phishing\.}
> header L_AV_SS_TestSig X-Amavis-AV-Status =~ m{\bAV:Sanesecurity\.TestSig_}
> header L_AV_SS_Spear X-Amavis-AV-Status =~ m{\bAV:Sanesecurity\.Spear\.}
> header L_AV_SS_Malware X-Amavis-AV-Status =~
> m{\bAV:Sanesecurity\.(Malware|Rogue|Trojan)\.}
> header L_AV_SS_Scam X-Amavis-AV-Status =~
> m{\bAV:Sanesecurity\.(Scam[A-Za-z0-9]?)}
> header L_AV_SS_Spam X-Amavis-AV-Status =~
> m{\bAV:Sanesecurity\.(Bou|Cred|Dipl|Job|Loan|Lott|Porn|Spam[A-Za-z0-9]?|Stk|Junk)\.}
> header L_AV_SS_Hdr X-Amavis-AV-Status =~ m{\bAV:Sanesecurity\.Hdr\.}
> header L_AV_SS_Img X-Amavis-AV-Status =~
> m{\bAV:Sanesecurity\.(Img|ImgO|SpamImg)\.}
> header L_AV_SS_Bounce X-Amavis-AV-Status =~ m{\.Spam\.Bounce(\.[^.,
> ]*)*\.Sanesecurity\b}
> header __L_AV_SS X-Amavis-AV-Status =~ m{\bAV:Sanesecurity\.}
> meta L_AV_SS_other __L_AV_SS && !(L_AV_SS_PhishBar|| L_AV_SS_Phish ||
> L_AV_SS_TestSig || L_AV_SS_Spear || L_AV_SS_Scam || L_AV_SS_Spam ||
> L_AV_SS_Malware || L_AV_SS_Hdr ||
> L_AV_SS_Img || L_AV_SS_Bounce)
> header L_AV_MSRBL_Img X-Amavis-AV-Status =~ m{\bAV:MSRBL-Images\b}
> header L_AV_MSRBL_Spam X-Amavis-AV-Status =~ m{\bAV:MSRBL-SPAM\.}
> header L_AV_MBL X-Amavis-AV-Status =~ m{\bAV:MBL_(?!NA\.UNOFFICIAL)}
> header L_AV_SecInf X-Amavis-AV-Status =~ m{-SecuriteInfo\.com\b}
>
> score L_AV_Phish 14
> score L_AV_Spam 5
> score L_AV_PhishHeur 5
> score L_AV_SS_Phish 5
> score L_AV_SS_PhishBar 0.5
> score L_AV_SS_TestSig 0.123
> score L_AV_SS_Spear 4
> score L_AV_SS_Scam 8
> score L_AV_SS_Spam 8
> score L_AV_SS_Hdr 6
> score L_AV_SS_Img 3.5
> score L_AV_SS_Bounce 0.1
> score L_AV_SS_other 1
> score L_AV_SS_Malware 14
> score L_AV_MBL 14
> score L_AV_MSRBL_Img 3.5
> score L_AV_MSRBL_Spam 6
> score L_AV_SecInf 8
>
>
> Mark
>
For convenience, you can grab Mark's current version from:
http://www200.pair.com/mecham/spam/amavis-sanesecurity_v2.cf
--
Gary V
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
