Hello,
Send a complete sample to spam \-at/ timj.co.uk for addition to http://www.timj.co.uk/linux/bogus-virus-warnings.cf
With kind regards, Met vriendelijke groet,
Maurice Lucas TAOS-IT
----- Original Message ----- From: "Ronald I. Nutter" <[EMAIL PROTECTED]>
To: <users@spamassassin.apache.org>
Sent: Tuesday, May 03, 2005 3:12 PM
Subject: First attempt at writing SPAM rules
We are getting flooded this morning with email that contains the following item(s) in the body of the message -
*** Server-AntiVirus: No Virus (Clean) *** "GEORGETOWNCOLLEGE" Anti-Virus *** http://www.georgetowncollege.edu
OR
*** Attachment-Scanner: Status OK *** "GEORGETOWNCOLLEGE" Anti-Virus *** http://www.georgetowncollege.edu
Here is that I have created as a rule set -
body BOGUS_SERVER_AV /Server-AntiVirus:/ describe BOGUS_SERVER_AV Blocks Bogus AV Clean message score BOGUS_SERVER_AV 20.0
body BOGUS_ATTACH_SCAN /Attachment-Scanner:/ describe BOGUS_ATTACH_SCAN Blocks Bogus Attach Scan message score BOGUS_ATTACH_SCAN 20.0
Any suggestions ?
Thanks, Ron
-------------------------------------------------------------------- Ron Nutter [EMAIL PROTECTED] Network Infrastructure & Security Manager Information Technology Services (502)863-7002 Georgetown College Georgetown, KY 40324-1696 --------------------------------------------------------------------
