Hi there,

On Tue, 16 Jan 2018, Kris Deugau wrote:

I'm trying to create signatures to match a particular series of
large to very large spams whose main identifier is a <style> or
<script> tag containing neither CSS or Javascript.

However, I'm having trouble finding a valid signature string ...

I wonder if it would be easier to filter the sender(s) rather than to
filter the messages.  I use GeoIP and a homebrew Sendmail milter very
successfully, and I never see the sort of spam you describe.  Can you
share with this list some of the IP addresses from which the messages
are being sent?  A couple of dozen would be a good start I think.

--

73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to