Re: [Exim] Re: Re: Re: Mydoom and virus signature updates

Pàgina inicial
Delete this message
Reply to this message
Autor: Peter Bowyer
Data:  
A: Exim users list
Assumpte: Re: [Exim] Re: Re: Re: Mydoom and virus signature updates
Michelle Konzack <linux4michelle@???> wrote:
> --
> Am 2004-07-27 08:52:50, schrieb Peter Bowyer:
>
>> OK, nothing special, but what SA rule triggers to detect the virus?
>
> OK, I was looking in some of the Messages...


<snip>

> So all Messages are coming with a forged Outlook Header...


Right. So when you said

> All 42/44 kByte Viruses are found by spamassassin 2.63


you actually meant that all messages with a forged Outlook header are found.
A bit different?

I believe they all have missing Message-ID headers, too. Not hard to pick up
on.

Peter