On Fri, 9 Jan 2004 06:57:04 -0800 Jeff Lasman <[EMAIL PROTECTED]> wrote:
We're being hit by MS security update emails. I know they're not spam, but rather more accurately described as virii or worms.
However, I'm wondering if anyone has a good rule that will mark these?
Thanks.
Jeff --
In the very beginning of my SpamAssassin usage, I added this to my local.cf:
# Raise the score on Microsoft executables score MICROSOFT_EXECUTABLE 5.5
Then I installed ClamAV. Now I get no hits on MICROSOFT_EXECUTABLE.
I just drop .exe (and other stuff) at the mail gateway. Haven't seen one of those virus emails get through at all. Sending .exe is bad.
Actually, that's not true.. I had one slip through because the attachment was missing in the first place. SA still tagged it as spam. :)
------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
