On Tue, 27 Jan 2004, Richard Beyer wrote: > Could someone help me cobble together a rule quickly to counteract the > attachments it's using. Something to catch test.zip, readme.zip and > body.zip (the most common ones it appears to be using at the moment).
I suggest simply installing clamav and additionally passing mail through it. Clam runs as a daemon and is actually much faster than SpamAssassin. Clamav was catching Novarg here almost immediately (I have a cron job that checks for virus updates once an hour). Here's a simple procmail recipie to use clamdscan: VIRUS=`/usr/local/bin/clamdscan --mbox --disable-summary --stdout -` :0 Di * VIRUS ?? FOUND /dev/null ========================================================== Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/ ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk