Hi,
but the system is already configured to bann mails with special
documents attached, even when no virus were found. Here is an example
message I get when a message wasnt relayed to recipient:
content_banned.txt
BANNED contents (.exe,.exe-ms,23676883772984656662(1).doc.exe) in mail FROM
[xxx] <[email protected]>
No viruses were found.
Banned name: .exe,.exe-ms,23676883772984656662(1).doc.exe
Content type: Banned
Internal reference code for the message is 09201-09/1bBb09PEuZHK
First upstream SMTP client IP address: [xxx]
xxx
According to a 'Received:' trace, the message originated at: [xxx],
[xxx] account [email protected] HELO
znwflfubbbqunrr.yfudaqirzgog.net
Return-Path: <[email protected]>
From: [email protected]
Message-ID: <[email protected]>
Subject: frent bill
Not quarantined.
The message WAS NOT relayed to:
xxx
554 5.7.0 Reject, id=09201-09 - BANNED:
.exe,.exe-ms,23676883772984656662(1).doc.exe
This message is a test result of ClamAV? I would like to add .doc as
banned name
Thomas B
Am 01.02.2016 um 13:50 schrieb Reindl Harald:
Am 01.02.2016 um 13:48 schrieb Thomas Barth:
for a week or so I get a lot of mails with bills as doc-documents and
Spamassassin is actually not able to mark it as spam
it is able
combined BAYES scores and other rules on a proper trained SA leads to
99.9% milter-reject rate of these malware mails here
