At 05:28 PM 5/18/2007, Bill Landry wrote: >Noel Jones wrote the following on 5/18/2007 3:14 PM -0800: > > At 04:49 PM 5/18/2007, Bill Landry wrote: > > > >> Well, this was not a good solution: > >> > >> @keep_decoded_original_maps = (new_RE( > >> qr'^MAIL$', # retain full original message for virus checking (can > >> be slow) > >> > >> as this had the effect of quarantining everything that SaneSecurity and > >> MSRBL detected, including spam, phish, image, scam, etc., and not just > >> malware. :-( > >> > >> Any other suggestions? Thanks, > >> > > > > I think your @virus_name_to_spam_score_maps is somehow > > wrong. Scanning the raw email doesn't change the result text > from clamdscan. > > > > >Other than score changes, it's identical to what can be found in the >amavis.conf-default included with the distro: > >@virus_name_to_spam_score_maps = > (new_RE( [ qr'^(Email|HTML)\.(Phishing|Spam|Scam[a-z0-9]?)\.'i => 1.5 ], > [ qr'^(Email|Html)\.Malware\.Sanesecurity\.' => undef ], > [ qr'^(Email|Html)(\.[^., ]*)*\.Sanesecurity\.' => 1.5 ], > [ qr'^(MSRBL-Images/|MSRBL-SPAM\.)' => 1.5 ], > )); > >Let me know if you see anything wrong here...
I don't see any obvious problems above. You don't happen to have @virus_name_to_spam_score_maps defined more than once, do you? maybe Mark has other suggestions. -- Noel Jones ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
