-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 de'i Friday 24 January 2003 09:40 la [EMAIL PROTECTED] cusku di'e > My email is virus-cleansed by Trend Micro Interscan Viruswall, which > is configured to send me the cleansed carcass (see below). About 50% > of my WORM_SOBIG.A carcasses are identified by razor2 as spam. I don't > know if it's because of non-human-aided spamtraps that just razor-report > all their input, or because many humans interpret email like this as spam > (I don't). I don't know what to do about it, so I guess this is just FYI. > I currently revoke them when I see them, though that's kind of thankless.
I report all Klez worms I get to Razor, but have no such rule for Sobig worms, so when the Big Boss showed up in my spamtrap, I assumed it was just another box heavily infested with Klez. One got through during a Razor outage, so I know my procmailrc isn't catching them. So someone else is reporting Sobig to Razor, which pe'i is correct. But a carcass shouldn't be caught by Razor. Probably it's being caught because the non-worm part of the message matches the non-worm part of an intact Sobig message. cmeclax -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE+MWLGuC68zGjlkbYRAqTgAJ0WuhoLH+sTLBhtpJuGrPmwetAAHgCcD868 PUc1vpUOxH2IDeNUQv+dWjA= =KIlA -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Razor-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/razor-users
