Stephen Reese wrote: > hmmmm, i still don't understand why SA is not even looking at them > though see's everything else?
In a nutshell, because virus messages don't look much like spam. Virus messages are usually sent via a legitimate ISP's mail server. They have (usually) valid return addresses- although it's almost certain that that particular user is not actually infected with most current viruses. The very nicely formatted "Microsoft" patch warning, from the point of view of any automated tool, looks a *lot* like a growing list of legitimate email- much of it automated listmail for a wide variety of sites, services, and products. Given that type of mail, I think the day is coming (sooner that most of us would like) when the only way to run SA on a site-wide basis is to do regular custom GA runs on the mail at your site. Alongside Bayes and whatever other new and old tricks can be applied to spam-fighting. -kgd -- <erno> hm. I've lost a machine.. literally _lost_. it responds to ping, it works completely, I just can't figure out where in my apartment it is. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
