<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.0.7">
</HEAD>
<BODY>
Max,<BR>
<BR>
Sophos picked it up fine here. I believe the relevant Sophos file came in 8/2:<BR>
<BR>
2 Aug 1 16:34 maila.ide<BR>
<BR>
What version of MailScanner are you running? There was a thread on the list today regarding the flags passed to Sophos. Newer versions of MailScanner pass the -archive to sweep. This appears to fix the problem. You can check the list archives for "-archive". You are running sophossavi - right?<BR>
<TT></TT><BR>
Hope this helps,<BR>
<BR>
Steve<BR>
Steve@Swaney.com<BR>
<TT></TT><BR>
<BR>
On Mon, 2003-08-04 at 22:31, Max Kipness wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE><FONT COLOR="#737373"><I>Hello -
My company hosts quite a few domains, and last Friday we started getting
emails admin@ourdomains.com with an attachment: message.zip. The
attached seems to make it through Fprot and Sophos ok, and I haven't
even bother to open it and see what it is. My question is whether I
could add a rule in spam.blacklist.rules like:
admin@*
Will this work without issue?
Thanks,
Max</I></FONT></PRE>
</BLOCKQUOTE>
</BODY>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.FLS.com/"><b>Fortress Systems, Ltd.</b></a>, and is
<br />believed to be clean.
</HTML>