Good day

Just installed Clamav and it appears to not catch [EMAIL PROTECTED]

I caught it in my Antivirus/File blocking procmail filters, which is how I 
know it got through.

The "signature" I use for this one is simple, I just look for:
CSmtpMsgPart123X456_000

It shows as:
boundary="CSmtpMsgPart123X456_000_" in the header (plus some more but that 
is constant)
and once or twice more in the body.

Since I have NO idea how to write an effective signature rule, any chance 
one of you more knowledgeable types could give it a shot?
I have MANY MANY copies from blocked mails...

Regards

Jerome
ePaxsys, Inc.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to