hi, On Mon, Jul 23, 2007 at 10:13:22PM +0200, Matthias Keller told us: > Using amavisd-new...
actually, with amavisd-new, you can treat virus names in a special way via regexes, so that it doesn't get recognized as a virus, but instead you can add extra points to the spamassassin score. This feature is available from version 2.5.0 (IIRC), look at @virus_name_to_spam_score_maps, e.g. @virus_name_to_spam_score_maps = (new_RE( [ qr'^(Email|HTML)\.(Phishing|Spam|Scam[a-z0-9]?)\.'i => 0.1 ], [ qr'^(Email|Html)\.Malware\.Sanesecurity\.' => undef ], [ qr'^(Email|Html)(\.[^., ]*)*\.Sanesecurity\.' => 0.1 ], # [ qr'^(Email|Html)\.(Hdr|Img|ImgO|Bou|Stk|Loan|Cred|Job|Dipl|Doc) # (\.[^., ]*)* \.Sanesecurity\.'x => 0.1 ], [ qr'^(MSRBL-Images/|MSRBL-SPAM\.)' => 0.1 ], )); Sven -- Linux zion.homelinux.com 2.6.20-1.2962.fc6xen #1 SMP Tue Jun 19 19:47:34 EDT 2007 i686 athlon i386 GNU/Linux 23:10:18 up 13 days, 9:53, 1 user, load average: 0.09, 0.42, 0.55
pgpdUzO1Ec6H2.pgp
Description: PGP signature