Milt Epstein wrote: > Anyway, I wanted to see if I could get help dealing with one repeating > annoying spam message. Actually, I think the message is coming from a virus > (i.e. machines that have been infected with the virus), but it seems the > message can be dealt with as if it were spam. I'm talking about the "goldfish" > message, as the subject states.
Bumping up the scores on the following rules has completely eliminated viruses from my inbox: score MICROSOFT_EXECUTABLE 10.0 score MIME_SUSPECT_NAME 3.0 score RELAYING_FRAME 10.0 The nifty thing about MICROSOFT_EXECUTABLE is, it detects executables even if the sender tries to disguise them by mime type (which is probably the case with your midi attachment). Obviously, if anyone ever has a valid reason to send you a microsoft executable, and/or to send you mail with frames in it, you'll need to be less draconian than this :-) Suzanne -- [EMAIL PROTECTED] - http://www.igs.net/~tril/ ------------------------------------------------------- This sf.net emial is sponsored by: Influence the future of Java(TM) technology. Join the Java Community Process(SM) (JCP(SM)) program now. http://ad.doubleclick.net/clk;4699841;7576301;v?http://www.sun.com/javavote _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
