Re: [exim] Malware bounce filtering

Top Page
Delete this message
Reply to this message
Author: Tony Finch
Date:  
To: David Saez Padros
CC: exim-users, Dave Lugo
Subject: Re: [exim] Malware bounce filtering
On Tue, 29 Nov 2005, David Saez Padros wrote:
>
> > BATV would be my preferred solution.
>
> The main problem is that most virus warnings don't use a null
> envelope sender.


They are best handled in the traditional SpamAssassin manner, by matching
patterns in the message subject and body. They have almost no useful
information from the original message and serve only as advertisements for
the vendors' products (ads of the kind that make the discerning viewer say
"I wouldn't use that if you paid me").

Tony.
--
<fanf@???> <dot@???> http://dotat.at/ ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}