On Fri, 08 Mar 2002, Michael Shields wrote: > In article <[EMAIL PROTECTED]>, > Daniel Pittman <[EMAIL PROTECTED]> wrote: >>> Low-hanging fruit, though it's out of date these days, catch >>> the snowhite virus since it's there: >>> >>> header SNOWWHITE_VIRUS Subject =~ /Snowwhite.*REAL story/ >>> describe SNOWWHITE_VIRUS The snow white virus >>> score SNOWWHITE_VIRUS 10 >> >> Don't you have a virus scanner? > > If you use a secure mailer, than viruses are not a threat, nothing but > more junk.
I agree with you here. They are just junk and wastage. > I don't see any reason not to consider them spam. They are not *commercial* email for a start. They are also not bulk email in the traditional sense. They cannot be stopped through DNS blacklists, for example, because they propagate through a peer network, not through a central exploder. Now, you are welcome to include them in your definition of SPAM. I can't stop you doing that and, if it makes you happy, great. Others here agree with you, too. I don't consider them spam, nor do other people here. So, people hold both views. :) On Fri, 08 Mar 2002, Michael Shields wrote: >> How would you, for example, propose to catch a polymorphic executable >> virus? Our code catches these using a disassembler and examining the >> code to see if it tries to do something malicious. > > I don't really care what the code is trying to do. I would be happy > to discard all executables. Every single one I receive is junk. Ah, now *THAT* is useful information. It's not so much that you want SpamAssassin to filter out email virus signatures. You just want your email system to filter out things that you consider junk which, in your case, include executable files. MIMEdefang <http://www.roaringpenguin.com/mimedefang/> does exactly what you want. It will strip away executable files and discard them completely for you -- perfect filtering of the "junk" you get. It will pass each message through SpamAssassin, presumably after mangling it, which gets you the spam filtering. MIMEdefang, or one of the handful of similar tools, is what you want to be using. Adding *much* more costly and *much* more limited tests to SpamAssassin to filter a few of the bits of junk you get /retroactively/ really isn't going to do much for your happiness. MIMEdefang is the right tool for the job. Please, try that as the mail filtering package you use. I think you will find it a very satisfactory match to your requirements. Daniel -- Sticks and stones are hard on bones. Aimed with angry art, Words can sting like anything. But silence breaks the heart. -- Phyllis McGinley _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
