On Fri, 2003-06-27 at 03:22, Simon Byrnand wrote:
> At 20:46 26/06/03 -0400, Mail Adminstrator wrote:
> >An Internet e-mail message was sent to you from an outside source that
> >contained an prohibited file type, but was removed for security
> >purposes.
> >The message header is attached below. If you must use e-mail to receive
> >business-related .exe files, there is a workaround. Please inform the
> >sender of the Internet Message to create a password protected zip file
> >as explained in the steps below. For assistance with this procedure,
> >please contact your local helpdesk.
>
> [snip]
>
> <offtopic rant>
>
> *SIGH*
>
> Why can't people get it right and make virus scanning systems that DON'T
> reply to mailing lists ? It seems pretty obvious that the people writing
> (these particular) email virus scanners havn't read or don't understand the
> SMTP RFC's at all.
Ooh can I have a rant too?
Why are people stupid? :) Some of it is "switch everything on" syndrome,
but how much of it provides free advertising for the virus scanning
software itself?
The obvious default should be messages off unless it is a known
non-forging virus, the exact opposite of what most scanners seem to do.
IMHO it's spam. Spitting out bogus warnings in all directions is about
as bad as running a wide open relay, there should be a dnsbl or
something.
I've had more sobig warnings than spam today, I've had enough :)
body __VIRUS_WARNING
/(attachment|email|file|message|scanner).{0,50}(contained|infected|reported).{0,50}virus/is
body __FORGING_VIRUS /(braid-a|bugbear|klez|sobig|winevar|yaha-e)/i
meta ANTISOCIAL_ANTIVIRUS (__VIRUS_WARNING && __FORGING_VIRUS)
describe ANTISOCIAL_ANTIVIRUS Message from conceptually defective virus
scanner
score ANTISOCIAL_ANTIVIRUS 5
Untested (yet) but that's as good a way of ranting as any :)
--
Yorkshire Dave
-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
