Sobig getting tagged as spam not virus

[Youn Gonzales]

configurable by domain might be better..

domaina.com        virus
domainb.com        virus filename
domainc.com        virus spam

Youn Gonzales
System Administrator
Comptia A+, Network+, INET+,
Cisco CCNA/CCDA Certified Technician
Microsoft Certified Professional

"sabbe dhamma anatta"


----- Original Message -----
From: "John Rudd" <jrudd at UCSC.EDU>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Friday, August 22, 2003 10:49 AM
Subject: Re: Sobig getting tagged as spam not virus


> On Friday, Aug 22, 2003, at 06:58 US/Pacific, Julian Field wrote:
>
> > So the whole argument depends on
> > 1) How your CPU power relates to your network speed
> > 2) What the balance is of infected mail versus spam mail
> > 3) What you do with most of your spam (i.e. delete it or not)
> > 4) and probably some other factors I haven't thought of yet.
> >
> > So it's a very difficult choice, and one that changes with
> >         a) your setup, and
> >         b) the characteristics of your incoming mail at any given
> > point in
> > time.
> >
>
> Since we don't delete any spam, it's probably not saving us much.
>
> How hard would it be to have the order be configurable?
>
> Scanning Order = filename virus spam dnsbl
> Scanning Order = spam dnsbl virus filename
>
> etc.
>