On Wed, 19 Nov 2003, Robert Davidson wrote:
>
> Hi everyone,
>
> I set up a SpamAssassin system for a company but they alerted me to a
> problem today.
>
> They have content filtering rules to stop people from abusing their
> employees. Basically any e-mails with naughty words are given 50 points
> and are stuffed into quarantine.
>
> The below rule is causing problems:
>
> body CUSTOM_RULE_01 /\bFUCK/i
>
> They contacted me because they were sent an MS Word document which looks
> like it has previously been infected with a virus that puts "ALT-F11
> it's the fuck!" or something into the document somewhere.
>
> I am running SA 2.55
>
> My question is how can I get SA to only scan the message text and not
> look into attachments like .doc files and so on?
Check out MIMEDefang. It can be used to split a message into seperate
parts and then process them appropriately. (EG feed text parts to
a content filter like SA, feed binary attachments to a AV-scanner, etc).
It will add to the processing overhead of each message but it should
do what you want.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
