[sanesecurity] Re: False Positive

  • From: Steve basford <steveb_clamav@xxxxxxxxxxxxxxxx>
  • To: <sanesecurity@xxxxxxxxxxxxx>
  • Date: Thu, 25 Aug 2016 18:02:33 +0100

Ah, if this is a spam log, it'll have snippets of real spam.. so it will get blocked.

Cheers,

Steve
Web: sanesecurity.com
Blog: sanesecurity.blogspot.com
Twitter: @sanesecurity



On 25 August 2016 17:45:05 Sujit Acharyya-choudhury <s.choudhury@xxxxxxxxx> wrote:

Sanesecurity.Junk.5192:4:*:6e6577206c61646965732070726f66696c657320286461746
96e6729

Sanesecurity.Junk.10398:4:*:4369616c6973205375706572

Sanesecurity.Junk.27120:4:*:4d616b6520656e65726779206f7665727768656c6d20796f
7520647572696e67206e69676874207265767a6573766f7573

Sanesecurity.Junk.51424:4:*:462a636b6275646479



And many more.  I think it is the content of the spammanager file that is
causing the problem.



Regarads



Sujit





From: sanesecurity-bounce@xxxxxxxxxxxxx
[mailto:sanesecurity-bounce@xxxxxxxxxxxxx] On Behalf Of Steve basford
Sent: 25 August 2016 17:28
To: sanesecurity@xxxxxxxxxxxxx
Subject: [sanesecurity] Re: False Positive



To decode the signature:

http://sane.mxuptime.com/

Cheers,

Steve
Web: sanesecurity.com
Twitter: @sanesecurity

On 25 August 2016 17:04:32 Sujit Acharyya-choudhury <s.choudhury@xxxxxxxxx>
wrote:

We are using SaneSecurity and the messages coming from MessageLabs are being
flagged as Virus:

F=<bounce-notify-verp-9496bb167c8f11c4d855@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
rejected after DATA: This message contains a virus
(Sanesecurity.Junk.51424.UNOFFICIAL).



Actually spammanager, from MessageLabs tells us that some e-mails are in
hold and may be spam.  If they are stopped, then it is a problem.  May be
the contents of the e-mail looks spammy.  How can I whitelist spammanager?





Regards



Sujit



Sujit Choudhury | IT Services

Birkbeck, University of London








Other related posts: