A knowledge of history and a good BAYES + digest tests (DCC, Razor,
and Pyzor) will kill these.
As far as I know, net tests are the way to catch these. So if you
aren't running the URIBLs and digests, you won't ever get them (though MTA
RBLs to kill off zombie delivery will work).
Paul Shupak
[EMAIL PROTECTED]
This illustrates the importance of seeing the X-Spam headers and providing a
complete picture. I will make an assumption the sample was missing important
information (like a URI). It's quite possible the problem mail should have
hit at least hit one network based test (unless you are one of the
unfortunate first people to receive this spam). If it did not hit at least
one, then there may indeed be ways to improve the situation. Make sure
network based test are not disabled; set:
$sa_local_tests_only = 0;
in your amavisd.conf. And if DCC and Razor are installed, make sure they are
enabled in v310.pre.
Gary V
_________________________________________________________________
Dont just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/
