Spamassassin Greeting Card Question

[Glenn Steen]

On 14/08/07, Denis Beauchemin <Denis.Beauchemin at usherbrooke.ca> wrote:
> Steve Freegard a écrit :
> > Julian Field wrote:
> >> Err... your rules have to have different names. You can't give a
> >> bunch of rules the same name, or else how does it tell the difference
> >> between which rule score (and description) applies to which rule?
> >
> > And why don't you condense all these rules into a single rule?
> >
> > header CBGREET99 Subjet =~ /^You've received (?:a|an)
> > (?:greeting){0,1}\s{0,1}(?:e|post){0,1}card from a (?:.+)!$/
> > score CBGREET99 99
> > describe CBGREET99 Greeting card spam and virus
> >
> > Would probably work (untested).
> >
> > Cheers,
> > Steve.
> Hello all,
>
> I've noticed that Bitdefender has been catching these for 4-5 days:
> Generic.Peed.Eml.034E7EA8
>
> I had to add the string "Generic.Peed.Eml" to
> %rules-dir%/virus.to.quarantine.rules so they would not fill my quarantine.
>
> Denis
>
Hi Denis, glad to hear your vacation was OK (from the other thread)...

These had a short spat of only BDC catching them, here... Then ClamAV
kicked in, catching a lot more like:
    Report: ClamAV Module:  message was infected: Email.Ecard-27
    Report: Bitdefender: Found virus Generic.Peed.Eml.08371AF0 in file
msg-8564-41.txt

... Yes, I use the new-ish "Clamav Full Message Scan = yes" thing.

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se