This one time, at band camp, Peter Hardy wrote: >On Wed, 2004-01-28 at 11:23, Jamie Wilkinson wrote: >> This one time, at band camp, Peter Hardy wrote: >> >Matching From: addresses sucks, but I don't yet know of a better way to >> >catch these. So I've added the following regexes to the mailman filter. >> >> I heard a theory that the attachment contains the string 'kernel.dll'. > >The viruses get picked up my spamassassin without any problems - just >having a windows executable attached is enough to hold a message for >moderation. > >The real problem is the warning replies from assorted anti virus >products. They balance out the stupidity of replying in the first place >by very sensibly stripping the virusy payload.
Ah. I trained bogofilter on broken antivirus responders the last time a big one hit, and it's doing well for me now. -- [EMAIL PROTECTED] http://spacepants.org/jaq.gpg -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
