-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday 23 Apr 2002 4:16 pm, joost witteveen wrote: > Well, OK I'm sure there is a rule that catches > files like .bat .pif .exe .com, but anyway, I'm getting > > a lot of messages like: > > Received: from unknown (HELO inje.iskon.hr) ([213.191.128.16]) > > (envelope-sender <[EMAIL PROTECTED]>) [...] > > X-Spam-Status: No, hits=0.5 required=5.6 tests=LARGE_HEX,RELAYING_FRAME > > version=2.20 [...] > > --M608E5Gt62681o15NX05jX22Eg8M1 > > Content-Type: audio/x-wav; > > name=alt.bat > > Content-Transfer-Encoding: base64 > > Content-ID: <C9Tne6X6cFqJj14jF> > > I'm sure the goal of the message is to make me write a .bat > file (the same message appears in .exe, .pif, ... variants), > that I then later execute. > > So, I wonder, why didn't the message hit any spamassassin rule?
Because it's a virus, not spam. There are several ways of integrating SpamAssassin with a virus scanner, I suggest you look at some (or write some rules for SA that mark .exe's as spam, but they won't go into the core engine). Try freshmeat as a good source of such modules, btw. - -- Matt. <:->get a SMart net</:-> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE8xX3H5tFry5Ir+lARAiG3AJ9zFOMmM3YOOmNgGIOtOn+XPHHyJgCcDVpK dPUGNrEPSUBCdmV3ufzq3aw= =FPJx -----END PGP SIGNATURE----- _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
