> -----Original Message----- > From: Chris [mailto:[EMAIL PROTECTED] > > On Thursday 18 August 2005 11:46 pm, Matt Kettler wrote: > > At 11:20 PM 8/18/2005, you wrote: > > >Got three of these tonight with the same trojan, SA detected the > > >other two as spam, this one slipped through just a bit > under the wire. > > > > Spamassassin doesn't try to detect viruses. That's what > virus scanners > > are best at. > > Realize that Matt, though usually there is enough of a spam > signature for SA to tag the actual message as spam, in this > one case there just wasn't enough. > Although this is a standalone box with no windows on it at > all, guess I could set one up anyway.
Put ClamAV (or another quality anti-virus) ahead of SpamAssassin or try using the ClamAV plug-in with SA. Some virus will even be larger than you would want to check with SA so using ClamAV separately usually makes the most sense. If your users are Outlook/Outlook Express users they will not have access to most exectuable extensions anyway so it can make sense to just block anything with those (exe, pif, com etc.) files. (I have a long list prep'ed for a regex or for Exim if anyone wants it posted again.) -- Herb Martin
