Virus Warnings

[Randal, Phil]

Just drop it in.

If you look at the first few lines output by

  spamassassin -D -p /etc/MailScanner/spam.assassin.prefs.com --lint

You'll see a line like

  debug: using "/etc/mail/spamassassin" for site rules dir

The site rules dir is where addition rules files should be dropped.

I'd recommend using RulesDuJour (http://www.exit0.us/index.php/RulesDuJour)
with the Tripwire, bigevil, antidrug, evilnumbers, randomval, bogusvirus and
mrwiggly rulesets so you're automatically updated.

Check this list's archives for more details.

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Roger Jochem
> Sent: 07 April 2004 17:26
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Virus Warnings
>
> Excelent!
>
> And I just need to put the file in the directory? Is there
> some change that need to be done in local.cf on spamassassin or none?
>
>
> ----- Original Message -----
> From: "Randal, Phil" <prandal at HEREFORDSHIRE.GOV.UK>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Wednesday, April 07, 2004 1:13 PM
> Subject: Re: Virus Warnings
>
>
> > Roger Jochem asked:
> >
> > > Is there any way I can block some of the hundreds of
> virus warnings
> > > my users receive per day for "sending" virus like netsky?
> > >
> > > Because netsky and so much other viruses use fake from
> address, this
> > > messages are all false. How could I block some of these with
> > > MailScanner?
> > >
> > > (I'm tired of explaying to every user that he is not
> infected and is
> > > not sending .scr files to some e-mail adress he never saw
> before...)
> > >
> > > Regards
> > >
> > > Roger Jochem
> >
> > Add http://www.timj.co.uk/linux/bogus-virus-warnings.cf to your
> > /etc/mail/spamassassin directory.
> >
> > It makes them high-scoring spam, so it doesn't get delivered (if
> > you're
> set
> > up that way).
> >
> > Phil
> >
> > ----
> > Phil Randal
> > Network Engineer
> > Herefordshire Council
> > Hereford, UK
>