--On Sunday, July 11, 2021 4:55 PM -0400 "Kevin A. McGrail"
<kmcgr...@apache.org> wrote:
We use the olevbmacro detection added to SA. I would guess that's
blocking the payload.I would guess that's blocking the payload.
On 11.07.21 13:35, Kenneth Porter wrote:
I see the plugin in the distribution but it doesn't appear to be
loaded by default and the rules in the plugin's man page don't appear
in the downloaded rules. So I guess I need to create a custom cf file.
I simpy uncommented it in /etc/spamassassin/v343.pre:
# OLEVBMacro - Detects both OLE macros and VB code inside Office documents
loadplugin Mail::SpamAssassin::Plugin::OLEVBMacro
the KAM.cf takes care of the rest.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Save the whales. Collect the whole set.
