Re: sa-update does not pick up newest German spam wave

2008-12-02 Thread Richard Hartmann
On Tue, Dec 2, 2008 at 18:20, Karsten Bräckelmann <[EMAIL PROTECTED]> wrote: > This is not spam but malware. Got a virus scanner? Yes. But when your scanners do not detect it yet, alternatives are needed. > sa-update generally is *not* meant for "signature style updates" once an > hour like tha

Re: sa-update does not pick up newest German spam wave

2008-12-02 Thread Richard Hartmann
On Tue, Dec 2, 2008 at 13:03, Kai Schaetzl <[EMAIL PROTECTED]> wrote: > http://wiki.apache.org/spamassassin/WritingRules Works like a charm, thank you very much! Added to my local wiki :) Is there a keyword to drop mail instead of changing its score, as well? Googling for that proved to be futil

Re: sa-update does not pick up newest German spam wave

2008-12-02 Thread Richard Hartmann
2008/12/2 Yet Another Ninja <[EMAIL PROTECTED]>: > these should be caught by your AV - submit samples to your vendor if its > still not being detected. While I agree in general, the text is very static and antivirus eats CPU, SA does not (so much). Richard

sa-update does not pick up newest German spam wave

2008-12-02 Thread Richard Hartmann
Hi all, this mail: Subject: Die E-Mail Adresse [EMAIL PROTECTED] wird gesperrt Body: Sehr geehrte Damen und Herren, Ihre Email "[EMAIL PROTECTED]" wird wegen Missbrauch innerhalb der naechsten 24 Stunden gesperrt. Es sind \d{2} Beschwerden wegen Spamversand bei uns eingegangen. Details und moeg