> I've been getting tons of this mail usually with virus's attached. I am
> also getting messages that seem to orginate from our own server but they
> don't.

The reason SpamAssassin doesn't catch them is twofold:

1) It's a virus, not spam.
2) It's only just come out, after the ruleset for 2.60 was already
finalized anyway. So if it doesn't trigger any of the more generic tests,
it aint gonna be found.

Seriously, virus scanners are for stopping viruses, SpamAssassin is for
stopping Spam. It seems far too many people on this list think
SpamAssassin should be a virus scanner as well...

Having said that the virus does seem to have a bug where it fails to
attach itself to the message about 1 in 10 times. (I havn't seen this
reported by any of the Anti-Virus sites, but I've seen a number of copies
of this message with a 0KB attachment size)

That means people like me whose mail is also virus scanned see 90% of
these messages blocked by the virus scanner but a few "slipping through"
which don't in fact have the virus body within the message, only the
message itself.

Although I havn't tried it, I would say that teaching the message to BAYES
using sa-learn in 2.60 should be very effective, as BAYES_99 in 2.60 has a
high enough score to tag as spam without any other tests...

Regards,
Simon



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to