[FastNet PRO Probable Spam] Sanesecurity help

[Richard Mealing]

Hi Stephen,

Have you added this?

Virus Names Which Are Spam = Sane*UNOFFICIAL HTML/* ScamNailer.Phish* winnow.malware* winnow.botnet.ff.trojans* winnow.botnets* Email.Phishing* CRDF.*

Depending on what you are using...

Then you need to add the rules into spamassassin, like -

#Sanesecurity Signature (jurlbl.ndb)
header SPAMVIRUSJurlblAuto X-YOURORGNAME-MailScanner-SpamVirus-Report =~ /Sanesecurity.Jurlbl.Auto/i
score SPAMVIRUSJurlblAuto 4.0

I can send them all if you like.

Richard

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Stephen Cox
Sent: 14 February 2011 09:52
To: MailScanner discussion
Subject: [FastNet PRO Probable Spam] Sanesecurity help

I recently added Sanesecurity signatures to my clamd, the problem is that infected files just go through MailScanner.

The message has an header entry of "...SpamVirus-Report: Sanesecurity.TestSig_Type4_Hdr.2.UNOFFICIAL", but it still delivers.

MailScanner version is 4.79.11.

What am I missing?

--
Stephen Cox
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110214/028a7a4d/attachment.html