On Tue, 2009-06-02 at 09:10 -0400, Jean-Paul Natola wrote:
> Hi all,
> 
> Is there a rule to catch these  messages  with no body and a 550 bite word
> attachment?

Yes, add the SaneSecurity clamav signatures.

codling.rtf: Sanesecurity.Spam.10307.UNOFFICIAL FOUND

Integration with spamassassin left as an exercise for the reader.  I
personally use Amavisd-new with @virus_name_to_spam_score_maps

-- 
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
www.austinenergy.com

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to