sorry, just to avoid misunderstanding.. indeed original headers are written, but as a header again. so at first glance infected mail looks like any other ham.
i remember ASSP was prepending Subject such as [ASSP-Virus] which was configurable. can't find this option now. ASSP_AFC-Plugin is disabled btw.. Katip -------- Original Message -------- Subject: Re: [Assp-test] Virus detected From: Katip <ka...@katip.com> To: ASSP development mailing list <assp-test@lists.sourceforge.net> Date: Thu, 22 Jan 2015 20:29:53 +0200 > Thanks. > EmailVirusReportsHeader doesn't work. > mail is forwarded to EmailVirusReportsTo as it is. > > Katip > > -------- Original Message -------- > Subject: Re: [Assp-test] Virus detected > From: Doug Lytle <supp...@drdos.info> > To: ASSP development mailing list <assp-test@lists.sourceforge.net> > Date: Wed, 21 Jan 2015 16:55:32 -0500 (est) > >>>> Does anyone know if this headers are written by ASSP? >> >>>> *Virus Detected:* 'Sanesecurity.Jurlbl.6890.UNOFFICIAL' >>>> *Full Header:* >> >> ClamAV with the SaneSecurity signatures reports back to ASSP and ASSP adds >> it to the headers. >> >> Doug >> >> ------------------------------------------------------------------------------ >> New Year. New Location. New Benefits. New Data Center in Ashburn, VA. >> GigeNET is offering a free month of service with a new server in Ashburn. >> Choose from 2 high performing configs, both with 100TB of bandwidth. >> Higher redundancy.Lower latency.Increased capacity.Completely compliant. >> http://p.sf.net/sfu/gigenet >> _______________________________________________ >> Assp-test mailing list >> Assp-test@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-test >> > > > ------------------------------------------------------------------------------ > New Year. New Location. New Benefits. New Data Center in Ashburn, VA. > GigeNET is offering a free month of service with a new server in Ashburn. > Choose from 2 high performing configs, both with 100TB of bandwidth. > Higher redundancy.Lower latency.Increased capacity.Completely compliant. > http://p.sf.net/sfu/gigenet > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > ------------------------------------------------------------------------------ New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
