> I would not be interested in putting in rules for catching every pissant > windows virus out there, however, if there were a provided set of rules > (i.e. in a contrib section or similar) that would catch the > headline-making-windows-worms stuff, that would be a great improvement. > (I understand the reasons for not making SA into a general purpose virus > scanner - and agree with them. Most of us I'd say are not asking for a > general purpose one.)
I was going to contribute a rules file for just this purpose, but after working on it for a while and having a heck of a time getting SA rules to detect certain viruses, I decided it would be massively easier to just install a virus scanner instead. Why reinvent the wheel? Everyone who contributes to SA could spend all of their time keeping up with the latest virus mutations, or we could just focus on trapping spam and let the virus scanners do their own job. I am using Odeiavir at the moment, it's basically a wrapper for QMail that calls FPROT or another virus scanner. Here's the URL: http://virus.isverybad.org/ If SA was going to have *any* virus support at all, I'd rather it just had an optional eval rule that calls FPROT or sophos or another easily available, regularly updated virus scanner. Heck, there's even an open-source one in development: http://www.openantivirus.org/ -- michael moncur mgm at starlingtech.com http://www.starlingtech.com/ "The ships hung in the sky in much the same way that bricks don't." -- Douglas Adams _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
