On Thu, 2005-05-26 at 10:42 -0500, Damian Menscher wrote: > On Thu, 26 May 2005, guenther wrote: > > > However, within the last 12 hours I got 9 Phishing Mails (obviously > > basically the same one) slipping through. > > > > So, should I go on and report one or two samples? > > Yes, to the SpamAssassin team.
Actually, I don't think so. SpamAssassin is designed to catch SPAM, not malware or phishing mails. The fact it triggers on most phishing mails is pretty much a coincidence, as there are no special tests for this. Besides, they don't want my SPAM anyway. ;) [1] Whereas ClamAV explicitly identifies more than 1000 phishing mails and HTML exploits. So ClamAV obviously is meant to trigger on phishing mails, but you don't want new ones to be reported? ...guenther [1] http://wiki.apache.org/spamassassin/DoYouWantMySpam -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
