Autor: Peter Bowyer Data: Para: Exim users list Asunto: Re: [Exim] Re: Re: Re: Mydoom and virus signature updates
Michelle Konzack <linux4michelle@???> wrote: > --
> Am 2004-07-27 08:52:50, schrieb Peter Bowyer:
>
>> OK, nothing special, but what SA rule triggers to detect the virus?
>
> OK, I was looking in some of the Messages...
<snip>
> So all Messages are coming with a forged Outlook Header...
Right. So when you said
> All 42/44 kByte Viruses are found by spamassassin 2.63
you actually meant that all messages with a forged Outlook header are found.
A bit different?
I believe they all have missing Message-ID headers, too. Not hard to pick up
on.
