hi,

On Mon, Jul 23, 2007 at 10:13:22PM +0200, Matthias Keller told us:
> Using amavisd-new...

actually, with amavisd-new, you can treat virus names in a special
way via regexes, so that it doesn't get recognized as a virus, but
instead you can add extra points to the spamassassin score.
This feature is available from version 2.5.0 (IIRC), look at
@virus_name_to_spam_score_maps, e.g.

  @virus_name_to_spam_score_maps =
    (new_RE( [ qr'^(Email|HTML)\.(Phishing|Spam|Scam[a-z0-9]?)\.'i => 0.1 ],
             [ qr'^(Email|Html)\.Malware\.Sanesecurity\.'        => undef ],
             [ qr'^(Email|Html)(\.[^., ]*)*\.Sanesecurity\.'     => 0.1 ],
           # [ qr'^(Email|Html)\.(Hdr|Img|ImgO|Bou|Stk|Loan|Cred|Job|Dipl|Doc)
           #       (\.[^., ]*)* \.Sanesecurity\.'x => 0.1 ],
             [ qr'^(MSRBL-Images/|MSRBL-SPAM\.)'   => 0.1 ],
    ));


Sven


-- 
Linux zion.homelinux.com 2.6.20-1.2962.fc6xen #1 SMP Tue Jun 19 19:47:34 EDT 
2007 i686 athlon i386 GNU/Linux
 23:10:18 up 13 days,  9:53,  1 user,  load average: 0.09, 0.42, 0.55

Attachment: pgpdUzO1Ec6H2.pgp
Description: PGP signature

Reply via email to