We do that also, but I was just looking for a quick way to scan through our virus "hold" folder. If this were added as a message header, we could see what type of virus it was when browsing that hold folder using Spam Reveiw.
Bill -----Original Message----- From: "John Tolmachoff" Sent: Tue, 1 Oct 2002 08:24:37 -0700 Subject: RE: [Declude.Virus] XINHEADER / XOUTHEADER Instead of worrying about the virus name in the header, why not have that in the postmaster message and include the headers in the message then you can see the postmaster message. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Bill B Sent: Monday, September 30, 2002 8:01 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] XINHEADER / XOUTHEADER I see that I can add the lines shown below to GLOBAL.CFG and it will add the virus name to the message headers in the D*.SMD file that is held when a virus is found. But is there a way to only add this to the message headers if a virus is indeed found? XINHEADER X-Note: %VIRUSNAME% XOUTHEADER X-Note: %VIRUSNAME% Because if you add this header every time you end up with this on emails that don't have a virus... X-Note: Unknown Virus The reason I want to add this headers is so that I can look at emails in the "/spool/virus" folder and see what type of virus was found in each without having to look it up in the logs each time. Thanks, Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
