Viruses tagged as spam

[Peter Bonivart]

Alex Neuman wrote:
> I seem to be getting a lot of viruses marked as high-scoring spam lately.
> Seems most of them come from machines infected with the latest netsky/bagle
> iterations, but get marked by DCC/Pyzor/etc. - could I be doing something
> wrong? Does anybody else experience the same situation?

Yes, it has saved me more than once when virus signatures were not yet
updated since I don't deliver high-scoring spam. It's a good thing.

> Second, since most spams are short, and most spam is stopped by most
> postmasters by using RBL's (local, commercial or otherwise) at the gateway
> MTA, could there be an option to virus scan first, and *then* scan for spam?
> Spam scanning should be unnecessary if you *know* it's a virus, right?

Please read the archives on this one. It has been discussed and
explained by Julian at least once a month for as long as I have
subscribed to this list. I admire his patience. ;-)

--
/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.29.7,
SpamAssassin 2.63 + DCC 1.2.39, ClamAV 0.70RC + GMP 4.1.2, MailStats 0.25