On Sat, 2008-01-26 at 01:53 +0100, mouss wrote: > Robert Fitzpatrick wrote: > > I see a message get sent through and labeled 'WARNING: contains banned > > part' like it should according to our banned policies as it scores zero > > in SA. I am assuming zero means that SA didn't even scan the content? If > > I take the source of the message without the attachment, it scores > > plenty high enough to kill. > > > > if the attachment is large, it will be skipped. The size is > configurable, but spending cycles on huge messages is generally not > worth the trouble. Up so far, spam rarely comes in large messages.
The whole message is less than 30K and contains usually video.zip and is a virus. We use ClamAV with SaneSecurity, the first one we got with Trojan.Pandex Virus was not found in the ClamAV db, anyone else picking these up? We're starting to get more and more of these. -- Robert ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
