SV: [Mimedefang] Antivirus quarantine - entire message instead of parts?

Kimmo Jaskari kimmo.jaskari at eget.fi
Wed Sep 24 05:15:01 EDT 2003


> On Tue, 23 Sep 2003, Kimmo Jaskari wrote:
> 
> > I need help modifying the default behaviour for how 
> messages that match a
> > virus scan are handled. Briefly, I'd like to quarantine the 
> entire message
> > instead of just the offending attachment,
> 
> Use this sequence when you find a virus:
> 
> 	action_quarantine_entire_message();
> 	action_discard();

That is what I had been doing, but I wasn't really awake yesterday,
apparently. I didn't think to change entity_contains_virus($entity) to
message_contains_virus ... so no wonder it choked when I tried to use the
above in the filter rule.

Working great now though, and I can easily extract any messages from the
quarantine by piping them back into sendmail directly. 

Now all I need is to make it send notifications to the postmaster account on
every virus deletion and I'll be a happy camper.

-- 

 ___________________________
|              
| European Game & Entertainment Technology Ltd Ab
| Kimmo Jaskari, System Administrator
| Torggatan 13 A, FIN-22100 Mariehamn, Åland, Finland
| Phone: +358 (0)18 24158, Mobile +358 (0)4575 759 158
|______________________________________________________  




More information about the MIMEDefang mailing list