On Fri, Dec 10, 1999 at 01:09:02PM -0600, Dustin Miller wrote:
> One of the fuctions of the patch was to attempt to actually ATTACH the
> offending e-mail virus to the mail that gets sent to virus alert. However,
> as you will be able to tell if you use the package, it doesn't properly
> ATTACH the e-mail, it just dumps all of the MIME parts as plain text into
> the message.
>
> Can someone help me out in this regard? I'm considering a total re-write of
> scanmails that will support qmail, and I want to make it as full-featured as
> possible.
>
As I'm currently in self-advertising mode - check out
http://www.geocities.com/jhaar/scan4virus/
This is my Qmail-specific virus scanner wrapper that follows some rules I'm
surprised to see other Email-based solutions don't.
* It never sends a copy of the virus to anyone. It moves it into a maildir
folder and sends the reference to the envelope sender and Cc's it to a local
"virus manager" address.
* It checks for mailing-list and postmaster-style envelope senders - it
never sends messages to them.
The latter is a BIG ISSUE I think. What happens on the day when everyone
within a particular mailing list runs Email scanners and a virus is
detected. At 10,000-strong list could suddenly find itself innudated with
10,000's of "Virus Report" mail messages. Denial Of Systems await...
Out of Office messages are bad enough...
--
Cheers
Jason Haar
Unix/Network Specialist, Trimble NZ
Phone: +64 3 3391 377 Fax: +64 3 3391 417
