Hi

I'm using MailShiled 3.1 and Spamassassin,

I try to stop the virus mail "Microsoft update" which contain exe file.

I configure the SpamDetect Engine "score 9".

Under "user_prefs" I configure "score MICROSOFT_EXECUTABLE 2 2 2 2" and under 
"local.cf" I configure special text:
body virustest1                         /\MS Outlook and MS Outlook Express as well\b/i
score virustest1                        4.0

body virustest2                          /\Customers should install the patch at the 
earliest opportunity\b/i
score virustest2                         4.0

With this configuration only if all above match the message will be block.

I did the following tests:


1. If we remove the exe file  (only the match message body) - the message is blocked 
(for the test, I raised the virustest1 & virustest2 scores so the would match the 
criteria). 
2. If the received message contains any .exe file and the original body text,  the 
message doesn't block.
3. If we copy the original message body and paste it to a new message, and attached 
any .exe file, the message is blocked.
I changed the Bypass oversize body to 250

I'm also looking for documentation about how to configure personal rules with 
spamassassin,
I know I can configure my own rules in the local.cf but what can I type ?
for example how can I limit the number of lines spamassassin will looking for my own 
words ?
What it's meens of "/\blive 
.{0,9}(?:fuck(?:ing)?|sex|naked|girls?|virgins?|teens?|porno?)\b/i" and where can I 
found all the parameters I can insert ?
and ETC

I read the Mail_SpamAssassin_Conf but can't find help.
 

Any help will be appraised

Thanks in advance

Idan



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to