Matt, > I'm using amavis-stats to get a nice graph of all mails.... > Probably it isn't able to distinguish like that... > That's why I'd love to get rid of the banned logs if a virus is found. > Or in other words: if the virus check doesn't find anything, THEN do > banned checks.. That would be the best for me.. But I guess it isn't > possible to 'reorder' those things easily?
I don't really know to what you are referring. Here is an example from my log (2.3.3) for a message, that was both infected and had a banned content: amavis[3635]: (03635-07) Blocked INFECTED (W32/Netsky-Q), [...] [...] <...> -> <...>, quarantine: virus/5/59g3j+78tdeQ, Message-ID: <[EMAIL PROTECTED]>, mail_id: 59g3j+78tdeQ, It only says INFECTED, it doesn't mention banned (although at higher log level it is evident that banned was triggered too). Fix the log analyzer. Mark ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
