Fw: Another silent virus addition - W32/Bagle-A

[Matthew K Bowman]

Anyone got this to work?

Thanks

Matthew
----- Original Message -----
From: "Matthew K Bowman" <mkbowman at neo.rr.com>
To: "Julian Field" <mailscanner at ecs.soton.ac.uk>
Sent: Monday, January 19, 2004 11:29 AM
Subject: Re: Another silent virus addition - W32/Bagle-A


> Hmm that didn't work
>
> Silent Virues = /etc/MailScanner/rules/silent.virus.rules
>
> Ruleset:
>
> Virus: default yes
> Virus: Bagle no
> FromorTo: default yes
>
> "Incorrect Syntax"
>
> I'm using 4.25-4
>
>
> ----- Original Message -----
> From: "Julian Field" <mailscanner at ecs.soton.ac.uk>
> To: "Matthew K Bowman" <mkbowman at neo.rr.com>
> Sent: Monday, January 19, 2004 9:10 AM
> Subject: Re: Another silent virus addition - W32/Bagle-A
>
>
> > You can use the "Virus:" keyword in some rulesets where you would
> otherwise
> > be using "To:".
> >
> > For example:
> >
> > Virus:  default yes
> > Virus:  Bagle   no
> > FromOrTo:       default yes
> >
> > At 14:04 19/01/2004, you wrote:
> > >Hello,
> > >
> > >Is there a way of breaking down the Virus notifications to specific
> Viruses?
> > >For example a client of ours doesn't want to receive any notifications
> about
> > >the W32/Bagle-A but still need to receive notifications about other
> viruses.
> > >
> > >I'm using MailScanner v 4.25-4, sendmail, RH9.
> > >
> > >Thank you
> > >
> > >Matthew
> > >----- Original Message -----
> > >From: "Dustin Baer" <dustin.baer at IHS.COM>
> > >To: <MAILSCANNER at JISCMAIL.AC.UK>
> > >Sent: Monday, January 19, 2004 9:00 AM
> > >Subject: Another silent virus addition - W32/Bagle-A
> > >
> > >
> > > > It appears that W32/Bagle-A spoofs the sender's address.  You all
> might
> > > > want to add it to your list of Silent Viruses
> > > >
> > > > Dustin
> > > > --
> > > > Dustin Baer
> > > > Unix Administrator/Postmaster
> > > > Information Handling Services
> > > > 15 Inverness Way East
> > > > Englewood, CO 80112
> > > > 303-397-2836
> > > >
> >
> > --
> > Julian Field
> > www.MailScanner.info
> > MailScanner thanks transtec Computers for their support
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
>