> -----Original Message----- > From: Bob Pierce [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 20, 2008 11:54 PM > To: users@spamassassin.apache.org > Subject: UPS / FedEx spam with virus attached > > We've been seeing lots of messages with contents similar to this: > > "Unfortunately we were not able to deliver postal package you > sent on July the 25 in time because the recipient's address is not > correct. > Please print out the invoice copy attached and collect the package at > our office." > > Of course the zip attachment contains a virus, and ClamAV does not seem > to be catching that either. > > Has anyone else been getting lots of these? If so, what are you doing > to > block them?
In small amavisd-based setups like mines you can easily ban .exe and the likes. Anyway, this kind of messages should get enough spam points to be blocked. How much do they score in your setup? Giampaolo > > Bob
