Hello. From: MATSUDA Yoh-ichi <[EMAIL PROTECTED]> Subject: Re: a patch of MICROSOFT_EXECUTABLE Date: Thu, 08 Jul 2004 04:00:07 +0900 (JST)
> Before posting, I found: > http://marc.theaimsgroup.com/?l=spamassassin-users&m=106432783718693&w=2 > > And, I know clamav is one of a trend of detecting viruses. > > From: "Lucas Albers" <[EMAIL PROTECTED]> > Subject: Re: a patch of MICROSOFT_EXECUTABLE > Date: Wed, 7 Jul 2004 10:10:31 -0600 (MDT) > > > All the virus detection is done in a virus scanner, not spamassassin. > > So don't code up rules to detect virus's in SA. > > Use clamav or mcafee or similar to detect virus's. > > > > Detecting virus's is not the goal or the purpose of SA. > > > > --Luke > > Okey, so I want to ask a question. > "MICROSOFT_EXECUTABLE" ruleset is an obselete, isn't it? After posted above, I downloaded 3.0.0-cvs version and I found below in"Changes": | ------------------------------------------------------------------------ | r6504 | felicity | 2004-02-04 20:08:59 -0800 (Wed, 04 Feb 2004) | 1 line | | remove MICROSOFT_EXECUTABLE Then, I watched FAQ in wiki, I found below: http://wiki.apache.org/spamassassin/MarkingAllWindowsExecutables I typed 'apt-get install clamav-daemon' in my debian 'sarge' box, and google'd several times. Finally I found very simple procmail recipe: http://gonzaburou.cocolog-nifty.com/blog/2004/04/procmail_bsfilt.html (Japanese) # ---beginning of my procmailrc--- SHELL=/bin/sh LOGFILE=$HOME/Mail/procmail.log DEFAULT=$ORGMAIL SPAM=$HOME/spam/spam/. DOUBT=$HOME/spam/doubt/. VIRUS=$HOME/spam/virus/. # Clam Antivirus :0 HB * ? clamdscan -m --quiet - ;test $? = "1" $VIRUS # call spamassassin :0fw: spamassassin.lock * < 600000 | spamassassin :0H: * X-Spam-Flag: YES * X-Spam-Status:.*autolearn=spam $SPAM :0H: * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* $SPAM :0H: * X-Spam-Flag: YES $DOUBT # ---end of my procmailrc--- -- Nothing but a peace sign. MATSUDA Yoh-ichi(yoh) mailto:[EMAIL PROTECTED] http://www.flcl.org/~yoh/index.htm
