Re: Spam and Virus attacks on my server
Suhas (QualiSpace) wrote: Hi friends, I am getting lot of virus/spam mails with the subject Mail server report”. Have any body cracked any rules for such spam? They're viruses.. I'd suggest clamav.
RE: Spam and Virus attacks on my server
We are using Symantec AV but still it's slipped thru it. Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any Technical Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Thursday, October 19, 2006 5:35 PM To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: Spam and Virus attacks on my server Suhas (QualiSpace) wrote: Hi friends, I am getting lot of virus/spam mails with the subject Mail server report. Have any body cracked any rules for such spam? They're viruses.. I'd suggest clamav.
RE: Spam and Virus attacks on my server
Can anybody help me in writing a rule to score the mails with subject Mail Server Report? I am using SA 3.0.1 (windows version) Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any Technical Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com -Original Message- From: Giampaolo Tomassoni [mailto:[EMAIL PROTECTED] Sent: Thursday, October 19, 2006 5:42 PM To: users@spamassassin.apache.org Subject: R: Spam and Virus attacks on my server We are using Symantec AV but still it's slipped thru it. Ah, this crappy proprietary code... :) giampaolo Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any Technical Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Thursday, October 19, 2006 5:35 PM To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: Spam and Virus attacks on my server Suhas (QualiSpace) wrote: Hi friends, I am getting lot of virus/spam mails with the subject Mail server report. Have any body cracked any rules for such spam? They're viruses.. I'd suggest clamav.
Re: Spam and Virus attacks on my server
Suhas (QualiSpace) wrote: Can anybody help me in writing a rule to score the mails with subject Mail Server Report? I am using SA 3.0.1 (windows version) Here's a rule for ya: header L_SUBJ_SRV_RPT Subject =~ /Mail Server Report/i describe L_SUBJ_SRV_RPT Stopgap rule for virus flood bypassing AV score L_SUBJ_SRV_RPT0.5 I'd suggest putting it in with the 0.5 score to start, then raise it after a short time to make sure it's not causing problems
RE: Spam and Virus attacks on my server
Thanks for your help matt Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any Technical Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Thursday, October 19, 2006 7:33 PM To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: Spam and Virus attacks on my server Suhas (QualiSpace) wrote: Can anybody help me in writing a rule to score the mails with subject Mail Server Report? I am using SA 3.0.1 (windows version) Here's a rule for ya: header L_SUBJ_SRV_RPT Subject =~ /Mail Server Report/i describe L_SUBJ_SRV_RPT Stopgap rule for virus flood bypassing AV score L_SUBJ_SRV_RPT0.5 I'd suggest putting it in with the 0.5 score to start, then raise it after a short time to make sure it's not causing problems
