[Mimedefang] Virus-notification for Admin and Recipient?

[Jim McCullars]

On Tue, 28 Jun 2005, Albert Ulmer wrote:

> we're currently in the process of switching our inbound eMail scanning
> over to MIMEDefang. Before, we used to include the milter statements
> for AntiVir MailGate and SpamassMilter into sendmail.mc, which worked
> nicely, but we wanted more control over attachments and MIME handling,
> so we decided to use MIMEDefang from now on.

   Welcome aboard!  I first put up MIMEDefang about three or four years
ago, and have never looked back.  I hope you have the same experience.

> The problem is that our users and admin personnel have become used to
> the behaviour of AntiVir MailGate, which sends a short notification
> email to the admin, who it was that would have received a virus. In
> addition, users were also send a short email stating that a virus
> headed for them has been blocked.

   Let me preface by saying that I do not do this and thus have never
tried any of what I am about to suggest, but here goes.  As to the first
part of your question, there is a function called
action_notify_administrator() that might do what you want.  You will have
to construct the message you want the admin to get, but all the useful
variables should be there (virus name, IP address of relay, intended
recipient, etc.).  As to the second part of your question, the only thing
I can think of offhand is to call action_replace_with_warning in sub
filter when a virus is found.

   HTH...

Jim McCullars
University of Alabama in Huntsville