Need help with rule set

Mark Nienberg lists at tippingmar.com
Wed Jul 29 19:03:59 IST 2009


Mark Sapiro wrote:
>
> The underlying issue is that with SaneSecurity ClamAV signatures, lots
> of spam gets processed as a virus and thus gets a virus notice rather
> than a spam or high spam action, and this postmaster address gets a
> lot of spam, the notices for which drown out the others.
>
>   
I agree this is a nuisance.  I deal with it by filtering mail with 
subject "Virus Detected" into a separate folder at the local mail 
delivery agent level.  True, the folder will receive real virus 
notifications as well as SaneSecurity detections, but that doesn't 
bother me too much.  A cronjob cleans items older than 10 days out of 
the folder so it doesn't grow too large.  If I haven't read it by then 
it probably isn't important.

Mark Nienberg


More information about the MailScanner mailing list