You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Suhas (QualiSpace)" <su...@qualispace.com> on 2006/10/19 13:41:19 UTC

Spam and Virus attacks on my server

Hi friends,

 

I am getting lot of virus/spam mails with the subject "Mail server report".
Have any body cracked any rules for such spam?

 

Warm Regards,

Suhas

System Administrator

QualiSpace - A QuantumPages Enterprise

===========================

Tel India: +91 (22) 6792 - 1480

Tel US: +1 (614) 827 - 1224

Fax India: +91 (22) 2530 - 3166

URL: http://www.qualispace.com <http://www.qualispace.com/>  

===========================

For Any Technical Query Please Use: http://helpdesk.qualispace.com
<http://helpdesk.qualispace.com/>  

QualiSpace Community Discussion forum: http://forum.qualispace.com 

 


RE: Spam and Virus attacks on my server

Posted by "Suhas (QualiSpace)" <su...@qualispace.com>.
Thanks for your help matt

Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===========================
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com 
===========================
For Any Technical Query Please Use: http://helpdesk.qualispace.com 
QualiSpace Community Discussion forum: http://forum.qualispace.com


-----Original Message-----
From: Matt Kettler [mailto:mkettler_sa@verizon.net] 
Sent: Thursday, October 19, 2006 7:33 PM
To: suhas@qualispace.com
Cc: users@spamassassin.apache.org
Subject: Re: Spam and Virus attacks on my server

Suhas (QualiSpace) wrote:
> Can anybody help me in writing a rule to score the mails with subject
"Mail
> Server Report"? I am using SA 3.0.1 (windows version)
>   
Here's a rule for ya:

header L_SUBJ_SRV_RPT   Subject =~ /Mail Server Report/i
describe   L_SUBJ_SRV_RPT   Stopgap rule for virus flood bypassing AV
score L_SUBJ_SRV_RPT    0.5


I'd suggest putting it in with the 0.5 score to start, then raise it
after a short time to make sure it's not causing problems




Re: Spam and Virus attacks on my server

Posted by Matt Kettler <mk...@verizon.net>.
Suhas (QualiSpace) wrote:
> Can anybody help me in writing a rule to score the mails with subject "Mail
> Server Report"? I am using SA 3.0.1 (windows version)
>   
Here's a rule for ya:

header L_SUBJ_SRV_RPT   Subject =~ /Mail Server Report/i
describe   L_SUBJ_SRV_RPT   Stopgap rule for virus flood bypassing AV
score L_SUBJ_SRV_RPT    0.5


I'd suggest putting it in with the 0.5 score to start, then raise it
after a short time to make sure it's not causing problems

RE: Spam and Virus attacks on my server

Posted by "Suhas (QualiSpace)" <su...@qualispace.com>.
Can anybody help me in writing a rule to score the mails with subject "Mail
Server Report"? I am using SA 3.0.1 (windows version)

Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===========================
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com 
===========================
For Any Technical Query Please Use: http://helpdesk.qualispace.com 
QualiSpace Community Discussion forum: http://forum.qualispace.com


-----Original Message-----
From: Giampaolo Tomassoni [mailto:g.tomassoni@libero.it] 
Sent: Thursday, October 19, 2006 5:42 PM
To: users@spamassassin.apache.org
Subject: R: Spam and Virus attacks on my server

> We are using Symantec AV but still it's slipped thru it.

Ah, this crappy proprietary code... :)

giampaolo


> Warm Regards,
> Suhas
> System Admin
> QualiSpace - A QuantumPages Enterprise
> ===========================
> Tel India: +91 (22) 6792 - 1480
> Tel US: +1 (614) 827 - 1224
> Fax India: +91 (22) 2530 - 3166
> URL: http://www.qualispace.com 
> ===========================
> For Any Technical Query Please Use: http://helpdesk.qualispace.com 
> QualiSpace Community Discussion forum: http://forum.qualispace.com
> 
> -----Original Message-----
> From: Matt Kettler [mailto:mkettler_sa@verizon.net] 
> Sent: Thursday, October 19, 2006 5:35 PM
> To: suhas@qualispace.com
> Cc: users@spamassassin.apache.org
> Subject: Re: Spam and Virus attacks on my server
> 
> Suhas (QualiSpace) wrote:
> >
> > Hi friends,
> >
> > I am getting lot of virus/spam mails with the subject "Mail server
> > report". Have any body cracked any rules for such spam?
> >
> 
> They're viruses.. I'd suggest clamav.
> 
> 
> 





R: Spam and Virus attacks on my server

Posted by Giampaolo Tomassoni <g....@libero.it>.
> We are using Symantec AV but still it's slipped thru it.

Ah, this crappy proprietary code... :)

giampaolo


> Warm Regards,
> Suhas
> System Admin
> QualiSpace - A QuantumPages Enterprise
> ===========================
> Tel India: +91 (22) 6792 - 1480
> Tel US: +1 (614) 827 - 1224
> Fax India: +91 (22) 2530 - 3166
> URL: http://www.qualispace.com 
> ===========================
> For Any Technical Query Please Use: http://helpdesk.qualispace.com 
> QualiSpace Community Discussion forum: http://forum.qualispace.com
> 
> -----Original Message-----
> From: Matt Kettler [mailto:mkettler_sa@verizon.net] 
> Sent: Thursday, October 19, 2006 5:35 PM
> To: suhas@qualispace.com
> Cc: users@spamassassin.apache.org
> Subject: Re: Spam and Virus attacks on my server
> 
> Suhas (QualiSpace) wrote:
> >
> > Hi friends,
> >
> > I am getting lot of virus/spam mails with the subject "Mail server
> > report". Have any body cracked any rules for such spam?
> >
> 
> They're viruses.. I'd suggest clamav.
> 
> 
> 


RE: Spam and Virus attacks on my server

Posted by "Suhas (QualiSpace)" <su...@qualispace.com>.
We are using Symantec AV but still it's slipped thru it.

Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===========================
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com 
===========================
For Any Technical Query Please Use: http://helpdesk.qualispace.com 
QualiSpace Community Discussion forum: http://forum.qualispace.com

-----Original Message-----
From: Matt Kettler [mailto:mkettler_sa@verizon.net] 
Sent: Thursday, October 19, 2006 5:35 PM
To: suhas@qualispace.com
Cc: users@spamassassin.apache.org
Subject: Re: Spam and Virus attacks on my server

Suhas (QualiSpace) wrote:
>
> Hi friends,
>
> I am getting lot of virus/spam mails with the subject "Mail server
> report". Have any body cracked any rules for such spam?
>

They're viruses.. I'd suggest clamav.




Re: Spam and Virus attacks on my server

Posted by Matt Kettler <mk...@verizon.net>.
Suhas (QualiSpace) wrote:
>
> Hi friends,
>
> I am getting lot of virus/spam mails with the subject "Mail server
> report”. Have any body cracked any rules for such spam?
>

They're viruses.. I'd suggest clamav.