Here is a custom rule for a PayPal spoof virus that is going around. I can't get this to trigger a hit in SA. I have linted my rules and my config files are being loaded properly.
header PAYPAL_VIRUS_001 Subject =~ /YOUR PAYPAL\.COM ACCOUNT EXPIRES/i describe PAYPAL_VIRUS_001 Wonderfull PayPal Virus score PAYPAL_VIRUS_001 100 I know I need a virus scanner on my mail server, which I am working on, but I need a quick fix for the time being. Pretty simple hich score an message with "YOUR PAYPAL.COM ACCOUNT EXPIRES" in the subject. I am not worried about false positives. Dan ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
