During one of the latest e-mail viruses, one of my clients started
labeling all of the reproductive messages as spam. Within a few
training sessions, the virus problem went away because it was all
placed in the dumpster. Personally, I never would have thought of
doing that but I have a clever client.
I did the same with SpamAssassin when Sobig.F started hitting me with
hundreds per day (bounces and infections alike). I manually set the
MICROSOFT_EXECUTABLE score to 10.0 (the default score is only 0.3) and
set up Procmail to dump messages above 8.0. I'm pretty sure that dealt
with over 99% of the problem.
I personally think that nearly all ISPs, especially those with a large
proportion of newbies, should delete directly-executable attachments
without question.
--------------------------------------------------------------
from: Jonathan "Chromatix" Morton
mail: chromi(_at_)chromatix(_dot_)demon(_dot_)co(_dot_)uk
website: http://www.chromatix.uklinux.net/
tagline: The key to knowledge is not to rely on people to teach you it.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg