Re: Trying to id spam

2005-07-29 Thread Jim Maul
Andy Jezierski wrote: Dr Robert Young <[EMAIL PROTECTED]> wrote on 07/28/2005 07:06:35 PM: > Have a virus scanner that correctly identified the email as having a > virus attachment, but it still passed along the "cleaned" (ie the > attachment was removed) email. I was asked if there

Re: Trying to id spam

2005-07-29 Thread Andy Jezierski
Dr Robert Young <[EMAIL PROTECTED]> wrote on 07/28/2005 07:06:35 PM: > Have a virus scanner that correctly identified the email as having a   > virus attachment, but it still passed along the "cleaned"  (ie the   > attachment was removed) email.  I was asked if there was a way to   > "trash" the

Re: Trying to id spam

2005-07-29 Thread JamesDR
Dr Robert Young wrote: But you can use milter-spamc to direct all identified "spam" to an acct such as [EMAIL PROTECTED], and then simply 'dump' the acct's email periodically. Hence the inquiry On Jul 28, 2005, at 8:14 PM, jdow wrote: Please check with the ClamAV people. There is abs

Re: Trying to id spam

2005-07-29 Thread jdow
? {^_^} - Original Message - From: "Dr Robert Young" <[EMAIL PROTECTED]> To: Sent: 2005 July, 29, Friday 04:19 Subject: Re: Trying to id spam > But you can use milter-spamc to direct all identified "spam" to an > acct such as [EMAIL PROTECTED], and the

Re: Trying to id spam

2005-07-29 Thread Dr Robert Young
But you can use milter-spamc to direct all identified "spam" to an acct such as [EMAIL PROTECTED], and then simply 'dump' the acct's email periodically. Hence the inquiry On Jul 28, 2005, at 8:14 PM, jdow wrote: Please check with the ClamAV people. There is absolutely no way to get Sp

Re: Trying to id spam

2005-07-29 Thread Loren Wilton
> Have a virus scanner that correctly identified the email as having a > virus attachment, but it still passed along the "cleaned" (ie the > attachment was removed) email. I was asked if there was a way to > "trash" the resulting "cleaned" email... Ah! Different question! Yes, that should be p

Re: Trying to id spam

2005-07-28 Thread jdow
Please check with the ClamAV people. There is absolutely no way to get SpamAssassin to delete emails or even drop them. {^_^} - Original Message - From: "Dr Robert Young" <[EMAIL PROTECTED]> > Have a virus scanner that correctly identified the email as having a > virus attachment, but

Re: Trying to id spam

2005-07-28 Thread Dr Robert Young
Have a virus scanner that correctly identified the email as having a virus attachment, but it still passed along the "cleaned" (ie the attachment was removed) email. I was asked if there was a way to "trash" the resulting "cleaned" email... On Jul 28, 2005, at 4:13 PM, Rick Macdougall wr

RE: Trying to id spam

2005-07-28 Thread Herb Martin
> -Original Message- > From: David B Funk [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 28, 2005 6:15 PM > To: users@spamassassin.apache.org > Subject: Re: Trying to id spam > > On Thu, 28 Jul 2005, Rick Macdougall wrote: > > > Dr Robert Young wrote:

Re: Trying to id spam

2005-07-28 Thread David B Funk
On Thu, 28 Jul 2005, Rick Macdougall wrote: > Dr Robert Young wrote: > > > We had a very short spam come in (actually it had a virus attachment > > named "updated-password.zip"). There is not much to grab onto [snip..] > > attachment in the header/body of the email to ID this (see below). > > Any

RE: Trying to id spam

2005-07-28 Thread Herb Martin
ess to our users -- better to just force everyone to compress or zip if they have a legitimate reason to send executables. Herb Martin[EMAIL PROTECTED] http://LearnQuick.ComAccelerated MCSE in a Week Seminars   Sent: Thursday, July 28, 2005 3:13 PMTo: users@spamassassin.apache.orgSubject: Re: Trying to id spam Andy

Re: Trying to id spam

2005-07-28 Thread Andy Jezierski
Dr Robert Young <[EMAIL PROTECTED]> wrote on 07/28/2005 03:09:48 PM: > We had a very short spam come in (actually it had a virus attachment > named "updated-password.zip"). There is not much to grab onto > [snip] Don't use SA for trapping viruses, get a virus scanner.  ClamAV comes to mind. An

Re: Trying to id spam

2005-07-28 Thread Rick Macdougall
Dr Robert Young wrote: We had a very short spam come in (actually it had a virus attachment named "updated-password.zip"). There is not much to grab onto Content analysis details: (1.5 points, 5.0 required) pts rule name description -- ---

Trying to id spam

2005-07-28 Thread Dr Robert Young
We had a very short spam come in (actually it had a virus attachment named "updated-password.zip"). There is not much to grab ontoContent analysis details:   (1.5 points, 5.0 required)     pts rule name  description  -- --