I'd like to see a couple of small change made to the Declude Virus log: I'd like to see the attachment name that was banned added to banning file line. Thus: 02/19/2004 00:57:17 Q5e3101a101d8dea7 Banning file with pif extension [application/octet-stream] Would become: 02/19/2004 00:57:17 Q5e3101a101d8dea7 Banning file with pif extension: imbanned.pdf [application/octet-stream]
This would make it easier to automatically parse my virus log file and see what files are being banned. I would use this to determine is there a virus that isn't being caught or possibly an extension that I should unban. #2 ==================================== A second request, would be to add the IP address to the From line after the banned (You already do this with virus found and vulnerability found log lines) Thus: 02/19/2004 00:57:03 Q5e3001890238d967 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Would become: 02/19/2004 00:57:03 Q5e3001890238d967 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [outgoing from 64.200.128.98] I don't have a real reason for this other than more information makes our jobs easier. Scott Fisher Director of IT Farm Progress Companies --- [This E-mail scanned for viruses by Farm Progress Companies using Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
