Maciej Soltysiak wrote:
Hi,
This is not very good if anyone is using psender/precips.
psender/precips instructs qs to send email about discarded messages
only if they are discarded due to policy (not av) rules.
So If you add these to a setup with psender and/or precips
you will generate a message t
OK. I started to mantain the list and currently it can be found at:
http://www.rosec.info/burebista/quarantine-attachments.txt
It should be considered as "gamma" quality ;). I revised it 3 times but I
can never be sure. It works fine for me, I corrected many things.
--
Alin-Adrian Anton
Spintech
Hi,
AAA>I just subscribed to submit something which I consider to be usefull.
This is not very good if anyone is using psender/precips.
psender/precips instructs qs to send email about discarded messages
only if they are discarded due to policy (not av) rules.
So If you add these to a setup
No problem. I picked a subset of the ones you described to use
myself.
Several rules can be combined into one as well ... Things
like:
A virus was detected
virus detected
can be described as .*virus.*detected.*
I don't see too many foreign ones so I dropped a lot of those.
I also had to es
[EMAIL PROTECTED] wrote:
One comment. The line:
.*Invalid content in mail message (message rejected).* Virus-Subject:
bogus antivirus
should be
.*Invalid content in mail message \(message rejected\).*
Virus-Subject: bogus antivirus
And actually, I would say:
.*Invalid content in mail m
Message: 1
Date: Fri, 27 Aug 2004 14:16:44 +0300
From: Anton Alin-Adrian <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [Qmail-scanner-general]bogus antivirus spam
This is a multi-part message in MIME format.
--030209020708030609080902
Content-Type: text/plain; charset=us-as
Hello list,
I just subscribed to submit something which I consider to be usefull.
Based on the link at:
http://std.dkuug.dk/keld/virus/header_checks
I created a quarantine-attachments.txt file, attached to this message,
which implements the respective filters for bogus antivirus s
