Dr Robert Young wrote:
But you can use milter-spamc to direct all identified "spam" to an acct
such as [EMAIL PROTECTED], and then simply 'dump' the acct's email
periodically. Hence the inquiry ....
On Jul 28, 2005, at 8:14 PM, jdow wrote:
Please check with the ClamAV people. There is absolutely no way to get
SpamAssassin to delete emails or even drop them.
{^_^}
----- Original Message -----
From: "Dr Robert Young" <[EMAIL PROTECTED]>
Have a virus scanner that correctly identified the email as having a
virus attachment, but it still passed along the "cleaned" (ie the
attachment was removed) email. I was asked if there was a way to
"trash" the resulting "cleaned" email...
On Jul 28, 2005, at 4:13 PM, Rick Macdougall wrote:
Dr Robert Young wrote:
We had a very short spam come in (actually it had a virus
attachment named "updated-password.zip"). There is not much to
grab onto
Content analysis details: (1.5 points, 5.0 required)
____
pts rule name description
---- ----------------------
--------------------------------------------------
0.0 NO_REAL_NAME From: does not include a real name
0.2 HTML_20_30 BODY: Message is 20% to 30% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.2 MIME_HTML_ONLY BODY: Message only has text/html
MIME parts
1.1 PRIORITY_NO_NAME Message has priority, but no X-
Mailer/ User-Agent
0.0 MISSING_MIMEOLE Message has X-MSMail-Priority, but
no X-MimeOLE
so I wonder if one can use a rule to look for the name of the
attachment in the header/body of the email to ID this (see
below). Any thoughts on how to approach? Using SA 3.0.4 with
Razor2 installed.
How about running a virus scanner like clamav ?
Regards,
Rick
You'd be much better off with clamav... It uses less resources than
SpamAssassin to detect viruses, and is better at it. Right tool, right job.
--
Thanks,
James
