Re: Same virus again and again

> > I saw the same virus again and again on this ximian lists. Can
> somebody do something so this virus
> > will not be send again? For example, do not accept Content-Type:
> application/octet-stream
> 
> Actually it should be easier than that. If you look at the headers
> you'll notice that it's already been flagged as spam (the latest one had
> 11.2 hits out of 5.0 required). It seems like the cool thing would be to
> configure the list server so that it wouldn't forward spam.

Sorry, no.

The outdated-for-years SA version running on this list server still uses
a lot of bogus rules, which where dropped by the SA developers in later
versions for a reason. All Reply and Quoting rules are abused by
Spammers these days, for example.

ORBS and Osirusoft DNSBLs are down for a long time. The servers reply to
any test with a SPAM score. Thus, as these network tests are still used
by this list server, [1] every single mail gets biased towards being
spammy. Which renders the "SPAM above 5.0" rule useless. [2]

Beside all that: SA is *not* designed to trigger on Virii. Really. Ask
on the SA mailing list, but prepare to get flamed. ;-)  If it scores
virus mails high, that's more a coincidence. And I personally consider
it false learning, if it does.


If you really feel like filtering SPAM based on the score added by this
mailing list server, feel free to set up a a local Filter. It's easy --
although I really would advise to *not* do this.


FWIW: Ximian Desktop isn't continued AFAIK. You clearly can see this by
the lack of (new users) questions and discussion...

...guenther


[1] I have seen legitimate mails scoring way higher than 5 by this list
    server.

[2] Yes, it is *really* simple to drop these network tests. And yes, I
    already have informed the admins. More than once...


-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

_______________________________________________
Users maillist  -  [email protected]
http://lists.ximian.com/mailman/listinfo/users