Virus Warnings

[Roger Jochem]

Works great!

I'm already filtring a lot of fake virus messages... Thanks a lot!

Regards

Roger Jochem

----- Original Message -----
From: "Randal, Phil" <prandal at HEREFORDSHIRE.GOV.UK>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, April 07, 2004 1:45 PM
Subject: Re: Virus Warnings


> Just drop it in.
>
> If you look at the first few lines output by
>
>   spamassassin -D -p /etc/MailScanner/spam.assassin.prefs.com --lint
>
> You'll see a line like
>
>   debug: using "/etc/mail/spamassassin" for site rules dir
>
> The site rules dir is where addition rules files should be dropped.
>
> I'd recommend using RulesDuJour
(http://www.exit0.us/index.php/RulesDuJour)
> with the Tripwire, bigevil, antidrug, evilnumbers, randomval, bogusvirus
and
> mrwiggly rulesets so you're automatically updated.
>
> Check this list's archives for more details.
>
> Phil
>
> ----
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK
>
> > -----Original Message-----
> > From: MailScanner mailing list
> > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Roger Jochem
> > Sent: 07 April 2004 17:26
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Virus Warnings
> >
> > Excelent!
> >
> > And I just need to put the file in the directory? Is there
> > some change that need to be done in local.cf on spamassassin or none?
> >
> >
> > ----- Original Message -----
> > From: "Randal, Phil" <prandal at HEREFORDSHIRE.GOV.UK>
> > To: <MAILSCANNER at JISCMAIL.AC.UK>
> > Sent: Wednesday, April 07, 2004 1:13 PM
> > Subject: Re: Virus Warnings
> >
> >
> > > Roger Jochem asked:
> > >
> > > > Is there any way I can block some of the hundreds of
> > virus warnings
> > > > my users receive per day for "sending" virus like netsky?
> > > >
> > > > Because netsky and so much other viruses use fake from
> > address, this
> > > > messages are all false. How could I block some of these with
> > > > MailScanner?
> > > >
> > > > (I'm tired of explaying to every user that he is not
> > infected and is
> > > > not sending .scr files to some e-mail adress he never saw
> > before...)
> > > >
> > > > Regards
> > > >
> > > > Roger Jochem
> > >
> > > Add http://www.timj.co.uk/linux/bogus-virus-warnings.cf to your
> > > /etc/mail/spamassassin directory.
> > >
> > > It makes them high-scoring spam, so it doesn't get delivered (if
> > > you're
> > set
> > > up that way).
> > >
> > > Phil
> > >
> > > ----
> > > Phil Randal
> > > Network Engineer
> > > Herefordshire Council
> > > Hereford, UK
> >