Robert Fitzpatrick wrote: > Still getting these attachments with SA-3.1.7 + SARE + sa-update + > amavisd + clamav with sanesecurity sigs. Should I be blocking these with > those rule sets? Can someone test this to see how you may be blocking? > > http://esmtp.webtent.net/mail1.txt > > Thanks :) > 3.2.0 seems to do a nice job here.
All of these tests are in a vanilla 3.2.0 with sa-update on my test system. X-Spam-Status: Yes, score=6.6 required=5.0 tests=DKIM_POLICY_SIGNSOME, FH_HELO_EQ_D_D_D_D,RCVD_ILLEGAL_IP,TVD_SPACE_RATIO autolearn=no version= 3.2.0 0.5 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d 0.0 DKIM_POLICY_SIGNSOME Domain Keys Identified Mail: policy says domain signs some mails 3.2 RCVD_ILLEGAL_IP Received: contains illegal IP address 2.9 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO