We are getting flooded this morning with email that contains the
following item(s) in the body of the message -

*** Server-AntiVirus: No Virus (Clean)
*** "GEORGETOWNCOLLEGE" Anti-Virus
*** http://www.georgetowncollege.edu

OR 

*** Attachment-Scanner: Status OK
*** "GEORGETOWNCOLLEGE" Anti-Virus
*** http://www.georgetowncollege.edu


Here is that I have created as a rule set -

body BOGUS_SERVER_AV /Server-AntiVirus:/
describe BOGUS_SERVER_AV Blocks Bogus AV Clean message
score BOGUS_SERVER_AV 20.0

body BOGUS_ATTACH_SCAN /Attachment-Scanner:/
describe BOGUS_ATTACH_SCAN Blocks Bogus Attach Scan message
score BOGUS_ATTACH_SCAN 20.0

Any suggestions ?

Thanks,
Ron

--------------------------------------------------------------------
Ron Nutter                          [EMAIL PROTECTED] 
Network Infrastructure & Security Manager
Information Technology Services                        (502)863-7002
Georgetown College                                     
Georgetown, KY                                            40324-1696
--------------------------------------------------------------------

Reply via email to