> -Ursprüngliche Nachricht-
> Von: McDonald, Dan [mailto:[EMAIL PROTECTED]
> Gesendet: Mittwoch, 2. Juli 2008 14:00
> An: users@spamassassin.apache.org
> Betreff: Re: i'm unable to catch these
>
>
> On Wed, 2008-07-02 at 13:40 +0200, Arvid Ephraim Picciani wrote:
> > >Received: from n75.
nice .-)
i added L_UNVERIFIED_YAHOO and GEO_QUERY_STRING to my rules, as i'm still using
SA_3.17...so maybe those rules are only embedded into the 3.2x'er SA.
But pls tell me: how may CLAMAV score with 10 points ?
where is the "virus" ???
Ove
> -Ursprüngliche Nachricht-
> Von: Chri
> > But pls tell me: how may CLAMAV score with 10 points ?
> > where is the "virus" ???
>
> virus, phish, PUA or false-positive. I recommend reject them
> as SMTP level, not in SA plugin, if possible
we DO reject at smtp-level if we are sure that the mail is spam.
Our smtp-proxy is doing own te
it was NOT us, who was scoring with CLAMAV - it was Chris
(see first respone to my initial question).
We're using SA as "one under many" tests which the
smtp-proxy performs during the smtp-communication.
virus-check is done by another (windoze-based ;-) ) product...
Ove Starckjohann
> ---
Starckjohann, Ove wrote:
nice .-)
i added L_UNVERIFIED_YAHOO and GEO_QUERY_STRING to my rules, as i'm still using
SA_3.17...so maybe those rules are only embedded into the 3.2x'er SA.
But pls tell me: how may CLAMAV score with 10 points ?
where is the "virus" ???
This is probably ClamAV wit
At 05:23 02-07-2008, Starckjohann, Ove wrote:
10.10.10.21 is MY address. It's a smtp-PROXY which passes through
the smtp-connection to EXCHANGE02.
Network tests on the message headers will be ineffective.
Regards,
-sm
> At 05:23 02-07-2008, Starckjohann, Ove wrote:
> >10.10.10.21 is MY address. It's a smtp-PROXY which passes through
> >the smtp-connection to EXCHANGE02.
On 02.07.08 07:34, SM wrote:
> Network tests on the message headers will be ineffective.
not if the 10.10.10.21 is in trusted_networks and in
On Wednesday 02 July 2008 16:34:12 SM wrote:
> At 05:23 02-07-2008, Starckjohann, Ove wrote:
> >10.10.10.21 is MY address. It's a smtp-PROXY which passes through
> >the smtp-connection to EXCHANGE02.
>
> Network tests on the message headers will be ineffective.
>
that was my worry. With the defaul
Starckjohann, Ove wrote:
Received: from n75.bullet.mail.sp1.yahoo.com ([10.10.10.21]) by
EXCHANGE02.norddeutsche.de with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 30 Jun 2008 18:58:44 +0200
10.10.10.21 is MY address. It's a smtp-PROXY which passes through the
smtp-connection to EXCHANG
