Re: ScanMail Message: To Recipient virus found or matched file blocki ng setting.

2002-04-19 Thread Ian Abbott

On 19 Apr 2002 at 10:42, Daniel Stenberg wrote:

 On Fri, 19 Apr 2002, System Attendant wrote:
 
  ScanMail for Microsoft Exchange has taken action on the message, please
  refer to the contents of this message for further details.
 
 Please.
 
 Can the admin of this ScanMail stop polluting this list even more?

Looks like it's been configured to notify everyone associated with
the email about the virus.

 Can the admin of the wget list please prevent his mails from showing up here?

I suppose one such notification could be deemed useful, but if
several such notifications for arrive from various ScanMails for
every virus it would be more of a PITA.

Of course it would be even more of a PITA if ScanMail was sending
such notifcations to everybody concerned for emails that *might*
contain an unknown virus due to some policy setting (e.g. email
contains a .bat attachment).

 We don't need replies on all spam mails telling us that the spam contained
 viruses.

One could be useful, assuming people recognize the ScanMail
messages and read them *before* the infected mail! (Hmm - that
looks like a good way to disguise a virus - make it look like an
anti-virus notification!)

Of course, we wouldn't get so many if the list filtered viruses as
effectively as ScanMail!




Re: ScanMail Message: To Recipient virus found or matched file blocki ng setting.

2002-04-19 Thread Andre Majorel

On 2002-04-19 11:21 +0200, Hrvoje Niksic wrote:

 There are now fewer spams than there were (I know because I get the
 ones that get caught in the net), but we're not quite there yet.  We
 will be, though.

In case this is of any use to you, these procmail recipes block
at least 3/4 of the asian language spam I get :

:0
* ^Subject: .*±¤[-_ :]*°í
spam

:0
* ^Subject: =\?euc-kr\?
spam

:0
* ^Subject: =\?ks_c_5601-1987\?
spam

:0
* ^Subject: 
.*[æÃÁÆÇÏÎÑõÚýÝÞ±¹³º¼¾¥¶®·µ].*[æÃÁÆÇÏÎÑõÚýÝÞ±¹³º¼¾¥¶®·µ].*[æÃÁÆÇÏÎÑõÚýÝÞ±¹³º¼¾¥¶®·µ]
spam

-- 
André Majorel URL:http://www.teaser.fr/~amajorel/
std::disclaimer (Not speaking for my employer);