On Monday 18 February 2008 6:29 am, ram wrote: > On Mon, 2008-02-18 at 06:14 -0600, Chris wrote: > > On Monday 18 February 2008 4:33 am, ItsMikeE wrote: > > > For some time now I have been getting spams that look like > > > "Hello! I am tired this evening. I am nice girl that would like to chat > > > with you. Email me at [EMAIL PROTECTED] only, because I am using my > > > friend's email to write this. To see my pics" > > > > > > They are still not being picked up, despite me passing them to be > > > learnt for the bayes DB. > > > > > > Has anyone written a rule to filter these out? > > > > My box catches these with the below and this is what ClamAv tags it as: > > > > X-Spam-Virus: Yes (MSRBL-SPAM.NiceGirl.2697) > > > > Content analysis details: (37.5 points, 5.0 required) > > > > So even without running the ClamAv plug-in this would still get 27 > > points. > > > > HTH > > Chris > > scoring BOTNET at 5.0 dont you get far too many FP's > Besides how do you get clamav to score a plain text mail. Are you using > the clam signatures for spam
Not at all, I've yet to get an FP because of Botnet. As far as ClamAv I'm using the plug-in with these signature files: honeynet.hdb mbl.db MSRBL-Images.hdb MSRBL-SPAM.ndb phish.ndb scam.ndb securiteinfo.hdb vx.hdb -- Chris KeyID 0xE372A7DA98E6705C
pgpACW4AsGyXg.pgp
Description: PGP signature
