On Fri, 19 Sep 2003, Michael W. Cocke wrote:
> here's part of my local.cf file -
>
> rawtext MSCUST6a /latest version of security update/i
> describe MSCUST6a another MS worm
> score MSCUST6a 5
>
> full MSCUST6 /latest version of security update/i
> describe MSCUST6 msjunk
> score MSCUST6 5
>
> and here's an except of the message that's getting thru with no
> problems at all....
>
> this is the latest version of security update, the
> "September 2003, Cumulative Patch" update which resolves
>
> As you can see, the first sentence in the message should be getting
> stopped by somne variation of those tests. Nope.... What's
> happening?? (aside from my receiving around 100 of these idiot
> messages per hour)
>
> Mike-
What is your max message size set to? Most of those viruses
are over 150Kbytes raw size and a common SA max message size
is 50K~100K and so will not be scanned.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
