> [Worker_3] [VIRUS][scoring] 192.168.1.2
> <[email protected]> to:
> [email protected] 'INetMsg.SpamDomain-2w.cvent_com.UNOFFICIAL'
> passing because of 'INetMsg.SpamDomain-2w.'
>
> Shouldn't it say something about passing because the Message
> Score was less than the threshold, rather than "passing because
> of 'INetMsg.SpamDomain-2w.'"?
>
> Running version 2.0.2(1.0.06).

It's logging the "regexp match" that is, the signature matched one of
the
weighted virus regexp so instead of rejecting the message it was scored
due to the signature name match



------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to