Re: SA cannot block messages with attached zip

2016-05-23 Thread Bill Cole
On 21 May 2016, at 12:31, Dianne Skoll wrote: On Sat, 21 May 2016 12:28:48 -0400 "Bill Cole" wrote: On 20 May 2016, at 7:07, Dianne Skoll wrote: Sorry for the non-easy answer. Doing it properly requires a non-trivial amount of coding. I do not

Re: SA cannot block messages with attached zip

2016-05-23 Thread Reindl Harald
and BTW a mail from a machine listed at "pbl.spamhaus.org" (https://www.spamhaus.org/pbl/) should not make it to your content filters at all - so it appears that most people in this thread which face a high number of this problems don't setup their MTA proper no way that the sample mail

Re: SA cannot block messages with attached zip

2016-05-23 Thread Reindl Harald
Am 23.05.2016 um 15:24 schrieb Emin Akbulut: AVG or ClamAV or any other antivirus couldn't delete all these attached viruses; VirusTotal says. My mail server checks blacklists & SURBL servers. Anyway we might receive mails from unlisted IPs like zombie PCs. In the message with Zip attachment

Re: SA cannot block messages with attached zip

2016-05-23 Thread Emin Akbulut
AVG or ClamAV or any other antivirus couldn't delete all these attached viruses; VirusTotal says. My mail server checks blacklists & SURBL servers. Anyway we might receive mails from unlisted IPs like zombie PCs. In the message with Zip attachment includes javascipt files contains no url in the

Re: SA cannot block messages with attached zip

2016-05-23 Thread Paul Stead
On 22/05/16 02:10, @lbutlr wrote: Sure, there are 4 foxhole ones, but there are dozens on the main page there. The following code allows for easy config and download of the signatures you want. https://github.com/extremeshok/clamav-unofficial-sigs By default this will download and test the