On Thu, 24 Aug 2006, Philippe Couas wrote:

> How could i remover theses messages ?

Sorry for the late reply, I just received notice from the list today that we 
had been 'bouncing' messages.

We rejected this because I have a ClamAV MD5 signature for this image. While 
most images morph, this particular one for whatever reason doesn't. My 
ClamAV sig for this is blocking a few hundred a day.

Anyone using ClamAV can reject these before they ever get to SpamAssasin and 
save some CPU cycles. The signature line is:

25dbdaf1d2a93ab1075161a283e7e245:17940:CXC.ImageSpam.Stock13

Feel free to change the name to whatever you like locally. I have no idea 
why I called this Stock13 at the time.

(If you don't already have one, create a .hdb file where the main/daily.cvd
files are, such as ImageSpam.hdb  . If you installed from source this will 
be in /usr/local/share/clamav . If you didn't -- you're on your own. :-)

-Chris


==========================================================
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/

Reply via email to