Warning for bogus-virus-warning.cf Users

[Martin Hepworth]

Derek

looks like there's all sorts of MS based traps in the latest version.......

bad sys-admins for bouncing virus/spam bad sys-admin

I guess the issue is with people installing and forgetting MS.

MS hasn't bounced virus/spam by default for ages..so there must be a lot
of 'old' versions out there, or the upgrade script does too good a job
and keeps the bounce action in......

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Derek Winkler wrote:
> I've noticed lately that I haven't been receiving email from Julian.
>
> Turns out the bogus-virus-warnings.cf ruleset has a rule specifically for a
> from address containing MailScanner and it scores 3.5.
>
> # grep VIRUS_WARNING62 *.cf
> bogus-virus-warnings.cf:header VIRUS_WARNING62          From =~
> /Antivirus|InterScan|MailScanner|virusscan|WebShield
> SMTP|NortonAV|DrWeb-DAEMON|amavisd-new|virenscanner|GateLockX200|Filtermails
> |MailMonitor/i
> bogus-virus-warnings.cf:describe VIRUS_WARNING62        From header
> indicates unhelpful 'virus warning' (62)
> bogus-virus-warnings.cf:score VIRUS_WARNING62           3.5
>
> Only works with emails sent by Julian, mailscanner at ECS.SOTON.AC.UK, not from
> the list in general.
>
> Thanks,
>
> Derek
>
>
>
> This email and any files transmitted with it are confidential and
> proprietary to Algorithmics Incorporated and its affiliates
> ("Algorithmics").  If received in error, use is prohibited.  Please destroy,
> and notify sender.  Sender does not waive confidentiality or privilege.
> Internet communications cannot be guaranteed to be timely, secure, error or
> virus-free.  Algorithmics does not accept liability for any errors or
> omissions.  Any commitment intended to bind Algorithmics must be reduced to
> writing and signed by an authorized signatory.
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
>

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html