Spam-Virus Action ?
supunr at lankacom.net
Thu Apr 1 08:30:15 IST 2010
I believe that the newer mailscanner versions ( I found the below text
in MailScanner.conf - version 4.79.11 )
has the ability to differentiate between real Virus and Spam-Virus (
clamav spam signatures )
Is it possible to quarantine these messages straight away rather than
forwarding again for SPAM checking with spamassassin etc.
so that we save more CPU and time ?
Abstract from MailScanner.conf :
# Some virus scanners now use their signatures to detect spam as well as
# viruses. These "viruses" are called "spam-viruses". When they are found
# the following header will be added to your message before it is passed to
# SpamAssassin, listing all the "spam-viruses" that were found as a comma-
# separated list.
# This can also be the filename of a ruleset.
Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:
# This defines which virus reports from your virus scanners are really the
# names of "spam-viruses" as described in the "Spam-Virus Header" section
# above. This is a space-separated list of strings which can contain "*"
# wildcards to mean "any string of characters", and which will match the
# whole name of the virus reported by your virus scanner. So for example
# "HTML/*" will match all virus names which start with the string "HTML/".
# The supplied example is suitable for F-Prot6 and the SaneSecurity
# databases for ClamAV. The test is case-sensitive.
# This cannot be a ruleset, it must be a simple value as described.
Virus Names Which Are Spam = Sane*UNOFFICIAL HTML/* *Phish*
With Best Regards,
Lanka communication Services (Pvt) Ltd.
65C, Dharmapala Mawatha,
More information about the MailScanner