On Tue, 27 Jan 2004, Richard Beyer wrote:

> Could someone help me cobble together a rule quickly to counteract the
> attachments it's using.  Something to catch test.zip, readme.zip and
> body.zip (the most common ones it appears to be using at the moment).

I suggest simply installing clamav and additionally passing mail through it.
Clam runs as a daemon and is actually much faster than SpamAssassin.

Clamav was catching Novarg here almost immediately (I have a cron job that
checks for virus updates once an hour).

Here's a simple procmail recipie to  use clamdscan:


VIRUS=`/usr/local/bin/clamdscan --mbox --disable-summary --stdout  -`

:0 Di
* VIRUS ?? FOUND
/dev/null





==========================================================
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to