Hi I've made a test but it does not look like I have the full headers.
I've implemented your test in Filter_begin where the virus test is done as I wanted to save the headers only for virus mails.
Maybe my problem is with filter_begin and I should move the save headers in filter_end.
Here is a test from testvirus.org, so I test good email and virus email. I should have nearly the same informations in Headers :
Good Email :
=-=-=-=-=-=-
Return-Path: <[EMAIL PROTECTED]>
Received: from mail01.excedent.us (crc2.excedent.us [12.5.19.157])
by shax.sioban.net (8.12.11/8.12.11) with ESMTP id i46FKuNx013799
for <[EMAIL PROTECTED]>; Thu, 6 May 2004 17:20:56 +0200
X-Originating-Ip: 194.242.168.20
Message-Id: <[EMAIL PROTECTED]>
Date: Thu, 06 May 2004 11:29:20 -0500
From: "TESTVIRUS.org" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Virus Scanner Test Authorization
Mime-Version: 1.0
Content-Type: text/plain;Virus Email :
=-=-=-=-=-=-=
X-Originating-Ip: 194.242.168.20
Message-Id: <[EMAIL PROTECTED]>
Date: Thu, 06 May 2004 11:22:52 -0500
From: "TESTVIRUS.org" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Virus Scanner Test #1
Mime-Version: 1.0
Content-Type: multipart/mixed; BounDary="=====================_307115168==_"
As you see I'm lacking at least the "Received:" line which is the most important part in the headers for me.
In mail log I get for the source : 12.5.19.157
MDLOG,i46FEUmQ013540,virus,EICAR-AV-Test,12.5.19.157,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,Virus Scanner Test #1
Steffen Kaiser wrote:
On Thu, 6 May 2004, Jerome Tytgat wrote:
Is there a possibility, with mimedefang, to automatically save only the headers (I don't want the full mail, as forwarding virus is not a good idea) to a folder using for name the reference number of the mail (also found in MDLOG entries) for easy linking.
I do it like so in filter_end():
my $logd = $Features{'Path:QUARANTINEDIR'} . "/maillog"; if(-d $logd) { my $logf = "$logd/${MsgID}-Report-" . localtime() . ".txt"; if(open(LOG, ">$logf")) { print LOG $report; if(open(H, 'HEADERS')) { print LOG "\nHeaders:\n" . join('', <H>); close H; } else { print LOG "\nFailed to open headers: $!\n"; } close LOG; } else { skalog "\nFailed to create logfile: $logf: $!\n"; } } else { skalog "No maillog dir: $logd"; }
Bye,
-- ==================================== > J�r�me Tytgat Administrateur R�seau et S�curit� ASTERION - Impasse de la Hache CP 5911 - 44 477 CARQUEFOU CEDEX T: 02 40 300 800 - F: 02 40 25 10 74 ====================================
_______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
