Re: qmail-scanner-attachments.db for netsky and beagle RE: Stopping Sophie doesn't work very well

These are the things I added:

AttachedFile.zip        0       Bagle
Attach.zip              0       Bagle
TextDocument.zip        0       Bagle
Readme.zip              0       Bagle
Msg.zip                 0       Bagle
MsgInfo.zip             0       Bagle
Document.zip            0       Bagle
Info.zip                0       Bagle
AttachedDocument.zip    0       Bagle
TextDocument.zip        0       Bagle
Text.zip                0       Bagle
TextFile.zip            0       Bagle
Letter.zip              0       Bagle
MoreInfo.zip            0       Bagle
Message.zip             0       Bagle
Information.zip         0       Bagle
message_details.pif     0       Netsky
mp3music.pif            0       Netsky
document.pif            0       Netsky
your_bill.pif           0       Netsky
document_excel.pif      0       Netsky
your_details.pif        0       Netsky
my_details.pif          0       Netsky
document_word.pif       0       Netsky
your_picture.pif        0       Netsky
yours.pif               0       Netsky
your_file.pif           0       Netsky

management@|administration@|[email protected]       Virus-MAILFROM:
Bagle
E-mail account disabling warning        Virus-Subject:  Bagle
E-mail account security warning.        Virus-Subject:  Bagle
Email account utilization warning.      Virus-Subject:  Bagle
Important notify about your e-mail account.     Virus-Subject:  Bagle
Notify about using the e-mail account.  Virus-Subject:  Bagle
Notify about your e-mail account utilization.   Virus-Subject:  Bagle
Warning about your e-mail account.      Virus-Subject:  Bagle
Weah, hello! :-\)       Virus-Subject:  Bagle
Weeeeee! ;\)\)\)        Virus-Subject:  Bagle
Hi! :-\)                Virus-Subject:  Bagle
ello! =\)\)             Virus-Subject:  Bagle
Hey, ya! =\)\)          Virus-Subject:  Bagle
\^_\^ meay-meay!        Virus-Subject:  Bagle
\^_\^ meay-meay!        Virus-Subject:  Bagle
\^_\^ mew-mew \(-:      Virus-Subject:  Bagle
Hokki =\)       Virus-Subject:  Bagle


On the line with management, staff, etc, substitute your domain for
internetpro.net.

Also, don't foget to run /var/qmail/bin/qmail-scanner-queue.pl -g
after you modify the file.  Oh, and all columns are <TAB> delimited. Spaces
will not work.



Trey Nolen



----- Original Message ----- 
From: "Pete Henshall" <[email protected]>
To: "Discussion about Virge/Sophie/Trophie/..." <[email protected]>
Sent: Wednesday, March 10, 2004 8:34 AM
Subject: qmail-scanner-attachments.db for netsky and beagle RE:
[vtools]Stopping Sophie doesn't work very well


> > > 2 I'm having a wierd problem. I have Postfix with amavisd-new
> SpamAssassin
> > > and Sophie and it detects virussus very wel but from time to time
> virusses
> > > get past the filter and i can't find any record about the entire mail
in
> the
> > > amavisd or postfix log. Does this have to do with Sophie??
>
> > We are calling Sophie with qmail-scanner and have modified the
> > qmail-scanner-attachments.db to handle the Netskys and Bagles that were
> > getting through.  We are thinking about adding Clamav as well, but are a
> > little worried about the extra CPU load of running two virus scanners.
>
> Any chance of you sharing your quarentine-attachments with us?  Having 2
> scanners running isn't ideal on our load (as you say)..
>
> Thanks
> Pete
>
>
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
>