# t29.dk postfix header_checks regexp file, rev. 29a (2020-05-07) # # The purpose of this file is to catch and reject bogus antivirus warnings using postfix. # # Maintained by Niels Callesoe # No patterns have been added since dec 2004. It appears AV vendors have either gotten the message # or these filters are simply enough. However, if you do see any "virus warnings" that slip # through, Google me to find contact into and let me know. If you do not see your submission added, # it is probably because it would already have been caught by the expressions below. # # Usage (main.cf): # header_checks = regexp:/etc/postfix/header_checks # # To reduce clutter in this file, all discussion, attributions etc. have been removed. # # The antiantivirus configuration file can be considered public domain, and distribution is unlimited. # /^Subject: \{Virus\?\}/ REJECT Bogus antivirus warning (1) /^Subject: Virus Detected by Network Associates, Inc\. Webshield/ REJECT Bogus antivirus warning (2) /^Subject: ---- Virus Detected ----$/ REJECT Bogus antivirus warning (3) /^Subject: Virus detected$/ REJECT Bogus antivirus warning (4) /^Subject: Virus Alert$/ REJECT Bogus antivirus warning (5) /^Subject: InterScan NT Alert$/ REJECT Bogus antivirus warning (6) /^Subject: Virus found in the message$/ REJECT Bogus antivirus warning (7) /^Subject: Message quarantined$/ REJECT Bogus antivirus warning (8) /^Subject: VIRUS ALERT!/ REJECT Bogus antivirus warning (9) /^Subject: Virus found in e-mail \(/ REJECT Bogus antivirus warning (10) /^Subject: MDaemon Warning - Virus Found/ REJECT Bogus antivirus warning (11) /^Subject: Warning: E-mail viruses detected$/ REJECT Bogus antivirus warning (12) /^Subject: ScanMail Message: To Sender virus found/ REJECT Bogus antivirus warning (13) /^Subject: Norton Anti ?Virus detected/ REJECT Bogus antivirus warning (14) /^Subject: VIRUS .*IN YOUR MAIL$/ REJECT Bogus antivirus warning (15) /^Subject: Antigen found / REJECT Bogus antivirus warning (16) /^Subject: Filter incident$/ REJECT Bogus antivirus warning (17) /^Subject: Vírus figyelmeztetés! Virus warning!$/ REJECT Bogus antivirus warning (18) /^Subject: Symantec AV?F detect/ REJECT Bogus antivirus warning (19) /^Subject: ?Returned due to virus/ REJECT Bogus antivirus warning (20) /^Subject: Anti-Virus Notification/ REJECT Bogus antivirus warning (21) /^Subject: BANNED .* IN MAIL FROM YOU/ REJECT Bogus antivirus warning (22) /^Subject: File blocked - ScanMail for Lotus/ REJECT Bogus antivirus warning (23) /^Subject: NAV detected a virus/ REJECT Bogus antivirus warning (24) /^Subject: VIRUS .+ IN MAIL FROM YOU/ REJECT Bogus antivirus warning (26) /^Subject: Virus Notification:/ REJECT Bogus antivirus warning (27) /^Subject: Virus found in a message you sent/ REJECT Bogus antivirus warning (28) /^Subject: Virus found in sent message/ REJECT Bogus antivirus warning (29) /^Subject: VIRUS EN SU CORREO/ REJECT Bogus antivirus warning (30) /^Subject: Warning: antivirus system report$/ REJECT Bogus antivirus warning (31) /^Subject: MDaemon Notification -- Attachment Removed$/ REJECT Bogus antivirus warning (32) /^Subject: Information - Antivirus$/ REJECT Bogus antivirus warning (33) /^Subject: Symantec AntiVirus detected a violation/ REJECT Bogus antivirus warning (34) /^Subject: WARNING: YOU WERE SENT A VIRUS/ REJECT Bogus antivirus warning (35) /^Subject: SAV detected a violation in a document/ REJECT Bogus antivirus warning (36) /^Subject: MailMarshal has detected a suspect attachment/ REJECT Bogus antivirus warning (37) /^Subject: A virus was detected in your m/ REJECT Bogus antivirus warning (38) /^Subject: Recipient Virus-alert/ REJECT Bogus antivirus warning (39) /^Subject: Virus Found in message/ REJECT Bogus antivirus warning (40) /^Subject: E-?mail viruses detected/ REJECT Bogus antivirus warning (41) /^Subject: Undelivered mail: VIRUS FOUND/ REJECT Bogus antivirus warning (42) /^Subject: Quarantined Mail: virus from/ REJECT Bogus antivirus warning (43) /^Subject: Attenzione Virus/ REJECT Bogus antivirus warning (44) /^Subject: \[MailServer Notification\]To Sender virus found/ REJECT Bogus antivirus warning (45) /^Subject: virus in verschickter Nachricht gefunden/ REJECT Bogus antivirus warning (46) /^Subject: MailMarshal has detected a Virus in your message/ REJECT Bogus antivirus warning (47) /^Subject: Virus encontrado en el mensaje enviado/ REJECT Bogus antivirus warning (48) /^Subject: Security Alert - ScanMail for Lotus Notes/ REJECT Bogus antivirus warning (49) /^Subject: Virus Infection Alert/ REJECT Bogus antivirus warning (50) /^Subject: Warning - Virus Detected:/ REJECT Bogus antivirus warning (51) /^Subject: Skynet Mail Protection scan results/ REJECT Bogus antivirus warning (52) /^X-BLTSYMAVREINSERT/ REJECT Bogus antivirus warning (53) /^X-Virus-Scan-Result: Repaired/ REJECT Bogus antivirus warning (54) /^X-.*-MailScanner: Found to be infected/ REJECT Bogus antivirus warning (55) /^X-Scanned: Symantec Antivirus Scan - Virus found/ REJECT Bogus antivirus warning (56) /^X-Sender: NetMail AntiVirus Agent/ REJECT Bogus antivirus warning (57) /^X-Auto-Generated: Sophos antivirus plugin/ REJECT Bogus antivirus warning (58) /^Subject: Virusveszely! Virus warning!/ REJECT Bogus antivirus warning (59) /^Subject: Virus in mail from you\./ REJECT Bogus antivirus warning (60) /^Subject: Virus infection notice/ REJECT Bogus antivirus warning (61) /^Subject: Possible virus found in message you sent/ REJECT Bogus antivirus warning (62) /^Subject: AntiVir ALERT/ REJECT Bogus antivirus warning (63) /^Subject: Centrale Anti-Virus melding/ REJECT Bogus antivirus warning (64) /^Subject: Vexira ALERT/ REJECT Bogus antivirus warning (65) /^X-ELTE-VirusStatus: was_infected/ REJECT Bogus antivirus warning (66) /^Subject: You sent potentially unsafe content/ REJECT Bogus antivirus warning (67) /^Subject: Hov, du har sendt Jubii en virus !!!$/ REJECT Bogus antivirus warning (68) /^Subject: \[message from .*virus detect system\]$/ REJECT Bogus antivirus warning (69) /^Subject: Net Integrator Virus Alert$/ REJECT Bogus antivirus warning (70) /^Subject: AntiVirus Alert!$/ REJECT Bogus antivirus warning (72) /^Subject: \{ALERTA DE VIRUS\}/ REJECT Bogus antivirus warning (73) /^Subject: Virus in una mail per lei/ REJECT Bogus antivirus warning (74) /^Subject: .*AntiVirus scan results/ REJECT Bogus antivirus warning (75) /^X-Mailer: ravmd\// REJECT Bogus antivirus warning (76) /^Subject:.*ALERTE \- Vous avez envoye un mail avec virus/ REJECT Bogus antivirus warning (77) /^Subject:.*ALERTE\: un virus a / REJECT Bogus antivirus warning (78) /^Subject:.*ALERT\! Virus found in your mail/ REJECT Bogus antivirus warning (79) /^Subject:.*Anti-Virus Notification/ REJECT Bogus antivirus warning (80) /^Subject:.*Antigen Notification/ REJECT Bogus antivirus warning (81) /^Subject:.*Antigen found VIRUS/ REJECT Bogus antivirus warning (82) /^Subject:.*Antivirus stopped your message/ REJECT Bogus antivirus warning (83) /^Subject:.*Email Quarantined Due to Virus/ REJECT Bogus antivirus warning (84) /^Subject:.*Failed to clean virus file/ REJECT Bogus antivirus warning (85) /^Subject:.*Inflex scan report \[\d+\]/ REJECT Bogus antivirus warning (86) /^Subject:.*InterScan NT Alert/ REJECT Bogus antivirus warning (87) /^Subject:.*MMS Notification/ REJECT Bogus antivirus warning (88) /^Subject:.*MailSure Virus Alert/ REJECT Bogus antivirus warning (89) /^Subject:.*Ochrona antywirusowa/ REJECT Bogus antivirus warning (90) /^Subject:.*\! Virus Notify \!/ REJECT Bogus antivirus warning (91) /^Subject:.*SAV detected a violation in a / REJECT Bogus antivirus warning (92) /^Subject:.*VIRUS NO SEU EMAIL/ REJECT Bogus antivirus warning (93) /^Subject:.*Virus Check Alert/ REJECT Bogus antivirus warning (94) /^Subject:.*Virus Notification from Redstone/ REJECT Bogus antivirus warning (95) /^Subject:.*Virus Quarantine Notification/ REJECT Bogus antivirus warning (96) /^Subject:.*Virus in Ihrer Nachricht/ REJECT Bogus antivirus warning (97) /^Subject:.*Votre message contient un virus/ REJECT Bogus antivirus warning (98) /^Subject:.*Warning\: E-mail viruses detected/ REJECT Bogus antivirus warning (99) /^Subject:.*WorldSecure Server notification/ REJECT Bogus antivirus warning (100) /^Subject:.*\[SmartFilter\] Virus Alert / REJECT Bogus antivirus warning (101) /^Subject:.*\[Virus detected\]/ REJECT Bogus antivirus warning (102) /^Subject:.*virus trouve dans le message envoye/ REJECT Bogus antivirus warning (103) /^Subject:.*virus trovato in un messaggio inviato/ REJECT Bogus antivirus warning (104) /^Subject: HBOS plc Automated Email Administrator/ REJECT Bogus antivirus warning (105) /^Subject: Virus found:/ REJECT Bogus antivirus warning (106) /^Subject: Your mail server sent us a virus/ REJECT Bogus antivirus warning (107) /^Subject: This is an alert from eSafe$/ REJECT Bogus antivirus warning (108) /^Subject: Virus encontrado/ REJECT Bogus antivirus warning (109) /^Subject: Notification du serveur antivirus/ REJECT Bogus antivirus warning (110) /^Subject: NAV ha rilevato un virus in un documento inviato$/ REJECT Bogus antivirus warning (111) /^Subject: Network Associates Webshield - e-mail Content Alert$/ REJECT Bogus antivirus warning (112) /^Subject: Symantec AntiVirus\/Filtering for Domino detected a virus/ REJECT Bogus antivirus warning (113) /^Subject: Eclipse Internet VIRUSshield detected VIRUS/ REJECT Bogus antivirus warning (114) /^Subject: VIRUS MESSAGE$/ REJECT Bogus antivirus warning (115) /^Subject: Internet Mail Failure - Virus Alert$/ REJECT Bogus antivirus warning (116) /^Subject: FOUND VIRUS IN YOUR MAIL TO:/ REJECT Bogus antivirus warning (117) /^Subject: ALERT - Virus .+ found/ REJECT Bogus antivirus warning (118) /^Subject: Suppresion du Virus/ REJECT Bogus antivirus warning (119) /^Subject: Tipo de arquivo anexo nao permitido!/ REJECT Bogus antivirus warning (120) /^Subject: \[.+: Virus detected\]$/ REJECT Bogus antivirus warning (121) /^Subject: RAV[0-9]+ Antivirus notification/ REJECT Bogus antivirus warning (122) /^Subject: ATTENZIONE: Ricevuto VIRUS da/ REJECT Bogus antivirus warning (123) /^Subject: Warning: antivirus system report/ REJECT Bogus antivirus warning (124) /^Subject: WARNING: We blocked a virus that was sent to you/ REJECT Bogus antivirus warning (125) /^Subject: ScanMail Message: To Sender, virus found and action taken/ REJECT Bogus antivirus warning (126) /^Subject: Warning: A possible virus has been detected in one of your/ REJECT Bogus antivirus warning (127) /^Subject: Symantec har fundet en virus i den mail du har sendt/ REJECT Bogus antivirus warning (128) # 129 may catch too much, enable if you wish by removing '# ' # /^Subject: Content violation/ REJECT Bogus antivirus warning (129) /^Subject: Rejected Mail: attachment from/ REJECT Bogus antivirus warning (130) /^Subject: Returned mail: Possible Virus Infection/ REJECT Bogus antivirus warning (131) /^Subject: VIRUS \(.*\) FROM <.*>/ REJECT Bogus antivirus warning (132) /^Subject: Symantec Mail Security detected/ REJECT Bogus antivirus warning (133) /^Subject: Attachments not Delivered by MailScan/ REJECT Bogus antivirus warning (134) /^Subject: .+action taken by attachment blocking feature/ REJECT Bogus antivirus warning (135) /^Subject: You sent infected message/ REJECT Bogus antivirus warning (136) /^Subject: .+e-mail Content Alert$/ REJECT Bogus antivirus warning (137) /^Subject: VIRUSALARM/ REJECT Bogus antivirus warning (138) /^Subject: Virusdetection:/ REJECT Bogus antivirus warning (139) /^Subject: Recipient Virus-alert/ REJECT Bogus antivirus warning (140) /^Subject: Norton AntiVirus quarantined an attachment in a message/ REJECT Bogus antivirus warning (141) /^Subject: MailMonitor for Exchange has processed a suspicious mail/ REJECT Bogus antivirus warning (142) /^Subject: WARNING: YOU MAY HAVE A VIRUS/ REJECT Bogus antivirus warning (143) /^X-Tnz-Problem-Type: 40/ REJECT Bogus antivirus warning (144) /^Subject: Discarded Mail: virus from/ REJECT Bogus antivirus warning (145) /^Subject: SafeInternetEmail Notification/ REJECT Bogus antivirus warning (146) /^Subject: Subject: CMC MAIL GATEWAY ALERT/ REJECT Bogus antivirus warning (147) /^Subject: Warning: Possible Virus Infection/ REJECT Bogus antivirus warning (148) /^Subject: .*\/ VIRUS SENT FROM YOUR ADDRESS/ REJECT Bogus antivirus warning (149) /^Subject: virus encontrado/ REJECT Bogus antivirus warning (150) /^Subject: .*virus detectado/ REJECT Bogus antivirus warning (151) /^Subject: virus interceptado/ REJECT Bogus antivirus warning (152) /^Subject: Virus en un correo electr/ REJECT Bogus antivirus warning (153) /^Subject: virus de e-mail detectado/ REJECT Bogus antivirus warning (154) /^Subject: virus en su correo/ REJECT Bogus antivirus warning (155) /^Subject: incidencia de virus/ REJECT Bogus antivirus warning (156) /^Subject: violaci[oó]n de contenido/ REJECT Bogus antivirus warning (157) /^Subject: contenido no permitido/ REJECT Bogus antivirus warning (158) /^Subject: alerta del antivirus/ REJECT Bogus antivirus warning (159) /^Subject: VIRUS .* EN CORREO PRESUMIBLEMENTE SUYO/ REJECT Bogus antivirus warning (160) /^Subject: detectado un virus en su mensaje/ REJECT Bogus antivirus warning (161) /^Subject: fichero adjunto no permitido encontrado/ REJECT Bogus antivirus warning (162) /^Subject: Antigen encontr[oó] el fichero/ REJECT Bogus antivirus warning (163) /^Subject: Quarantined Mail: attachment from/ REJECT Bogus antivirus warning (164) /^Subject: GWAVA Sender Notification (Virus infection)/ REJECT Bogus antivirus warning (165) /^Subject: ?BitDefender found an infected/ REJECT Bogus antivirus warning (166) /^Subject: \[Virus\] Policy Violation/ REJECT Bogus antivirus warning (167) /^Subject: Non delivery report: 5.*(Virus infection)/ REJECT Bogus antivirus warning (168)