[Mimedefang] quarantine_entire_message: I don't get it

Paul Boven p.boven at chello.nl
Mon Sep 20 14:02:21 EDT 2004


Hi David, everyone,

David F. Skoll wrote:

>>3.) Notify recipient, who can determine if there's any chance the mail
>>was legit and request it either from the administrator or sender.

> That's OK, but as a recipient, I would find it quite annoying, and I would
> set up a rule to discard such notifications anyway.

True.. but as an admin, I don't want to be responsible for that one 
false positive.

>>>You could construct a new warning message using the MIME::Tools functions,
>>>and call replace_entire_message() inside filter_end to replace the entire
>>>message with your warning message.

> 	my $msg = MIME::Entity->build(Type => "text/plain",
> 				      Encoding => "7bit",
> 				      Data => ["first line.\n",
> 					       "Second line.\n"
> 					      ]);
>         replace_entire_message($msg);
>         action_change_header("Subject", "Virus warning");

Thank you very much, I was just getting started on googling that one 
together. One (hopefully) final question, if I may:

replace_entire_message() may only be called from filter_end(), but the 
virus-scanning gets done in filter_begin(). What would be the proper way 
to transfer the outcome of the virus-scan between those two functions, 
or should I just move the virus-scanning to filter_end() too?

Regards, Paul Boven.



More information about the MIMEDefang mailing list