On Sat, 31 Jan 2004 20:33:49 +0000 (GMT) "Alan J. Flavell" <a.flavell@???> wrote:
> them out: yes, there are spamassassin recipes available, but if we
> keep getting a torrent of 33-35kB reports that have to be fed to
> spamassassin before we reject them, it could get kind-of busy.
i took a list that paul vixie posted to the nanog the other day, and
put the following in my data section acl, just before i hand off to
clamav. probably not as pretty as could be, but here it is:
deny condition = ${if match{$header_subject:}{Anti-Virus Notification}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{BANNED FILENAME}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{File blocked - ScanMail for Lotus}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{InterScan NT Alert}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{Message deleted}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{NAV detected a virus}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{Norton AntiVirus detected}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{RAV AntiVirus scan}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{Symantec AntiVirus}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{VIRUS .* IN MAIL FROM YOU/}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{VIRUS IN YOUR MAIL}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{Virus Detected by Network Assoc}{yes}{no}}
message = Don't send pointless AV notifications, please
deny condition = ${if match{$header_subject:}{[MailServer Notification]To Sender virus found and action taken}{yes}{no}}
message = Don't send pointless AV notifications, please
--
Richard Welty rwelty@???
Averill Park Networking 518-573-7592
Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security
