Joe,
thanks for the fast respone.
We are currently running qmail-scanner, sophie, Sophos A/V so the virused emails
is being blocked, but qmail-scanner sends an information notice to the recipient
and the admin (me).
I can vouce that it is inconvenient having 400 identical emails notifiying me
and the user about the arrival of a virus. What I am seeking is a modification
to qmail-scanner so that these virus can be silently blocked.
The easy solution would be to silently drop all virus notifications but that
would leave me too distant as to what is going on.
Tim
On Thu, 25 Sep 2003, naos wrote:
> Joseph Young
> Involved.com
> System Admin
>
> Why not run clamscan with qmail-scanner. It blocks the virus...
>
> joe
>
>
>
>
> ----- Original Message -----
> From: "Tim Janes" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, September 25, 2003 1:12 PM
> Subject: [Qmail-scanner-general]How to handle 400 copies of Gibe/F a
> day.....
>
>
>
> Hi,
>
> I run a small company email gateway that handles about 2500 email per day,
> qmail-scanner has worked brilliantly for a couple of years, usually finding
> 1 or
> 2 virus per day.
>
> However during the last week 2 of our users have been getting a large volume
> of
> Gibe/F virus, one user in excess of 350 per day , the other around 50 per
> day.
>
> Some of the emails are to both so presumably the source is related. I have
> looked at the sending IP numbers to see if I can block at that level but
> there
> are dozens.
>
> The only thing I can thick of doing is to extend the idea of silent_virus so
> that I can specify soming like
>
> if (($virus = "gibe") && ($recip = "problem.user")) {
> silently junk without any notification to anyone
> }
>
> I am not really sure that my perl abilities are up to the task.
>
> Any other suggestions?
>
> Thanks for any help
>
> Tim.
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Qmail-scanner-general mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
>
>
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
