On May 14, 2007, at 10:46 PM, Bill Landry wrote:
These are not actually infected message, per say (virus, malware, trojan, etc), they are phish, scan, spam type messages. You can increase the score for these messages either within amavisd.config (these scores will get added to the overall SA score):
I understand they're not true virus files, but the default value of 0.1 is way low and was causing them to be passed on to users. It seems the SA rules to catch these should be in the standard set.
I just set the maps to undef, it was easier than writing a bunch of rules. Now they all skip delivery again.
Is there any reason SA needs to see these messages? Seems simply deleting them before they even get to SA is faster and does the same thing.
