Re: [Clamav-users] WARNING: Suspicious recipient address blocked
> It took 2 seconds to grep ClamAV sources..
>
> clamav-milter.c
>
> if(strchr("|;", *ptr) != NULL) {
> smfi_setreply(ctx, "554", "5.7.1", _("Suspicious recipient address blocked"));
>
> Yes it seems | and ; are blocked.
The "|" character might be used to expolit SMTP servers. It has no valid place
in an email address.
It is not a virus, probably spam, and/or an attempt to compromise the SMTP
server.
At your service,
-bryan bradsby
Postmaster
Texas State Government Net
NOC: 512-475-2432 877-472-4848
"If user education worked, it would have worked by now"
- Peter Gutmann, the Psychology of Insecurity
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs
> Maybe you need a different distro, that keeps things in default locations. http://FreeBSD.org -bryan ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [Fwd: [SURBL-Announce] PhishTank data added to SURBL phishing list (fwd)]
> Since clamAV does such a great job at catching phishing attacks, I was > wondering if the sig-writers would want to help out this project by > reporting any URLs they find in phishy email? Users can also do this, by using the -r option of clamav-milter. Huh? I can't find the -r option in clamav-milter or clamd. -bryan ___ http://lurker.clamav.net/list/clamav-users.html
