From: "Jason Haar" <[EMAIL PROTECTED]>
> A few of you have complained/noted that you didn't like that Q-S gave
out
> file and dir details as shown at the bottom of this message.

> There are (as usual) several ways to deal with this, but I want to
hear what
> people think of this one:

This is what I'm doing. I duplicated the email_sender subroutine and
modified it to send to the mail admin. It only says the important header
and file info, and leaves out the rest... so, it's quicker to read all
the informative bits (near the top of the message). A link in the mail
points to a hacked-up webmin interface that shows the quarantine message
file (if I'm not at my regular machine and have no SSH).

The mail to sender and recips only lists the virus information, a brief
advertisement :), and mail headers.

I have the admin mail looking like this:


==================
Reason: EICAR-AV-Test    (0.114033 secs)

To review and/or deliver this message, click: https://like to a website/

Return-path: [EMAIL PROTECTED]
Recipient:   [EMAIL PROTECTED]
Source IP:   24.112.123.456
From:    "Jay Swackhamer" <[EMAIL PROTECTED]>
To:      "Jay Swackhamer" <[EMAIL PROTECTED]>
Subject: Nice executable.
Message-ID: <16ff01c222f4$bfe7cf80$4201a8c0@jswack>
Date:    Wed, 3 Jul 2002 20:50:08 -0400

The e-mail scanner reported the following when it scanned that message:

--sophie results ---
FILE INFECTED : /path/to/file/mutara102574370052115571
VIRUS FOUND   : EICAR-AV-Test
---
==================







-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
No, I will not fix your computer.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to