Sobig.F notification question

[Lindsay Snider]

On Tuesday 09 September 2003 13:19, you wrote:
> I noticed this on the Mailscanner website regarding the Sobig.F virus:
>
> "However, it is currently up to the individual system administrators to
> keep this list up to date. If they haven't added "Sobig" to the list,
> then their MailScanner will continue to issue warnings to the senders,
> not knowing that they are fake."
>
> After seeing this, I promptly went into my config and tried to find out
> where this should be configured.  I'm assuming that I should add "Sobig"
> to the end of the silent viruses line.  This is what my silent viruses
> line looks like now:
>
> Silent Viruses = Klez Yaha-E Bugbear Braid-A WinEvar Sobig
>
> It doesn't say specifically on the mailscanner page that this is what I
> need to do, so I wanted to double check that this is all that needs to
> be done.
>
> Have I properly configured my MailScanner so that it won't send replies
> to Sobig virus identifications, or are there additional steps I need to
> take?  Maybe on the Sobig page on the MailScanner site, there should be
> an example so that other (sometimes clueless :) admins like me would
> know what to do :)

It looks right to me.  Here is our Silent Viruses line which includes some 
others viruses if you are interested.

Silent Viruses = HTML-IFrame Klez Yaha-E Bugbear Braid-A WinEvar Palyh Sobig 
Fizzer Trojan.Dropper Mimail Dumaru Dumaro

-lindsay
>
> thx
>
> k