> You could easily be right too. To be honest I didn't pick up that the > original poster was referring to attachments (my fault, should read more > carefully). As far as I can tell razor only processes text, whereas DCC > and pyzor aren't volunteering the information anywhere obvious. I > always assumed that they generated a checksum for the entire body, even > if that is a multipart message - but that may well be incorrect.
I also can't speak for Razor 2 and Pyzor, but the MIMEDefang Mailing list suggests that it does not process attachments. Therefore the suggestion... > I think there are some problems with classifying non-text attachments in > this way, since there might not necessarily be anything objectionable or > harmful about the attachment, and some attachments could conceivably > show up in genuine mail (for example gifs or jpgs of company logos). That's not what I meant - I meant a specific Spam banner like we have been seeing in more recent spams. But I hear what you are saying - whatever goes into the DB as a "Spam banner" should pretty much be moderated. But that seems to be how ClamAV's new virus submission works anyway ? ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
