At 12:34 PM 9/20/03 -0500, Philip Mak wrote:
Can SpamAssassin do something about these messages? There's been a big
flood of them recently, and they're all slipping through the filter.

Well they're viruses from the sven worm, not spams, so your best bet would be to install a virus scanner and let that do it's job, and let SA deal with spam.


However, you could write a custom rule or two to pick these off.

A body rule something like this should do:

body LOCAL_SVEN_WORM /\bThis is the latest version of security update\b/
score LOCAL_SVEN_WORM 1.0


DISCLAIMER: the above rule was written based on a very casual inspection of one of these messages. It's not been tested for false positives and may cause you trouble. I'd suggest testing it with the 1.0 score for a little bit, then bump it up to 5 if it seems to work well.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to