Virus Warnings

[Randal, Phil]

 /etc/rc.d/init.d/MailScanner reload (or the equivalent)

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Roger Jochem
> Sent: 07 April 2004 18:02
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Virus Warnings
>
> I need to restart Mailscanner in rulesdujour?
>
> ----- Original Message -----
> From: "Randal, Phil" <prandal at HEREFORDSHIRE.GOV.UK>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Wednesday, April 07, 2004 1:45 PM
> Subject: Re: Virus Warnings
>
>
> > Just drop it in.
> >
> > If you look at the first few lines output by
> >
> >   spamassassin -D -p /etc/MailScanner/spam.assassin.prefs.com --lint
> >
> > You'll see a line like
> >
> >   debug: using "/etc/mail/spamassassin" for site rules dir
> >
> > The site rules dir is where addition rules files should be dropped.
> >
> > I'd recommend using RulesDuJour
> (http://www.exit0.us/index.php/RulesDuJour)
> > with the Tripwire, bigevil, antidrug, evilnumbers, randomval,
> > bogusvirus
> and
> > mrwiggly rulesets so you're automatically updated.
> >
> > Check this list's archives for more details.
> >
> > Phil
> >
> > ----
> > Phil Randal
> > Network Engineer
> > Herefordshire Council
> > Hereford, UK
> >
> > > -----Original Message-----
> > > From: MailScanner mailing list
> > > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Roger Jochem
> > > Sent: 07 April 2004 17:26
> > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > Subject: Re: Virus Warnings
> > >
> > > Excelent!
> > >
> > > And I just need to put the file in the directory? Is there some
> > > change that need to be done in local.cf on spamassassin or none?
> > >
> > >
> > > ----- Original Message -----
> > > From: "Randal, Phil" <prandal at HEREFORDSHIRE.GOV.UK>
> > > To: <MAILSCANNER at JISCMAIL.AC.UK>
> > > Sent: Wednesday, April 07, 2004 1:13 PM
> > > Subject: Re: Virus Warnings
> > >
> > >
> > > > Roger Jochem asked:
> > > >
> > > > > Is there any way I can block some of the hundreds of
> > > virus warnings
> > > > > my users receive per day for "sending" virus like netsky?
> > > > >
> > > > > Because netsky and so much other viruses use fake from
> > > address, this
> > > > > messages are all false. How could I block some of these with
> > > > > MailScanner?
> > > > >
> > > > > (I'm tired of explaying to every user that he is not
> > > infected and is
> > > > > not sending .scr files to some e-mail adress he never saw
> > > before...)
> > > > >
> > > > > Regards
> > > > >
> > > > > Roger Jochem
> > > >
> > > > Add http://www.timj.co.uk/linux/bogus-virus-warnings.cf to your
> > > > /etc/mail/spamassassin directory.
> > > >
> > > > It makes them high-scoring spam, so it doesn't get
> delivered (if
> > > > you're
> > > set
> > > > up that way).
> > > >
> > > > Phil
> > > >
> > > > ----
> > > > Phil Randal
> > > > Network Engineer
> > > > Herefordshire Council
> > > > Hereford, UK
> > >
>