On Sun, 30 Nov 2003 22:48:42 -0600
rd <[EMAIL PROTECTED]> wrote:
> True, SA is missing it here too! Is there any way or any thing that
> we should be doing to feedback this info to the SA project??
>
> -rdg
SA's focus is on detecting UCE, not virii. If you want a quick fix, try
score MICROSOFT_EXECUTABLE 10
in your local.cf
or a better way is to hook a virus scanner into your MTA.
There are also some helpful rules to detect virus bounces on the wiki at
www.exit0.us or you could even write your own rules, they're only
regular expressions.
--
Yorkshire Dave. Custom rules for spamassassin, detect listwashing tokens
http://www.wot.no-ip.com/cgi-bin/detoken.pl
--
[EMAIL PROTECTED] mailing list
