MCP not working

Daniel Eiland daniel at
Thu Aug 9 17:06:58 IST 2007

Thanx for the link, i did not know about it.
The thing is that this mail does not have an attachment. Mailscanner (i
think) only scans attachments with clamav, and not the message body.

-----Oorspronkelijk bericht-----
Van: mailscanner-bounces at
[mailto:mailscanner-bounces at] Namens Scott Silva
Verzonden: donderdag 9 augustus 2007 17:47
Aan: mailscanner at
Onderwerp: Re: MCP not working

Daniel Eiland spake the following on 8/9/2007 5:07 AM:
> On Thu, 09 Aug 2007 14:05:04 +0200, Kai Schaetzl <maillists at>
>> Daniel Eiland wrote on Thu, 9 Aug 2007 12:30:02 +0200:
>>> describe MCP_W32_ZHELATIN_GEN
>> 1. your rules all have the same name, only the first (I think) will get
>> used. You could condense them, anyway, to something like /received
>> from a/".
> Good idea! Thanx.
>> 2. why would you use MCP for this? You are trying to catch a bit more
>> than you normally could with the rules you currently have. So, what you
>> is add extra rules to the ones coming with the distribution. Either from
>> sites like or by dropping your own rules in
>> /etc/mail/spammassassin.  Not MCP!
> Well, the thing is that these emails are in fact virusses.
> But since there's no attachment, it is not scanned by clamav or
> They are also not picked up by spamassassin rules. I also use
rules_du_jour for fetching all kind of rules.
> Getting this particular email in an outlook client makes (some version of)
outlook crash.
> Clicking the link in this email leads you to a website that will try to
use known exploits on your browser.
Have you tried the sanesecurity addons for clam?
I think this will catch these AND mark them as viruses.


MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

MailScanner mailing list
mailscanner at

Before posting, read

Support MailScanner development - buy the book off the website! 

More information about the MailScanner mailing list