Hi Steve. The Signature Sanesecurity.Junk.39242.UNOFFICIAL sucessfully catched it. I'va added a line to amavis to score it as Virus not Spam. Besides: My postfix tells me, bogusmx.rfc-ignorant.org also lists those senders now. Cheers, Steffen Am 17.03.2011 12:35, schrieb Steve Basford: > >> >> How can I get rid of this? It rapidly fills my boxes. >> > Hi Steffen, > > Thanks for the sample... just put out an update on the mirrors, hopefully > that should help. > > Cheers, > > Steve > Sanesecurity > >