Minimizing virus email in queue?

Nick Phillips nwp at LEMON-COMPUTING.COM
Thu Nov 29 18:09:36 GMT 2001


On Thu, Nov 29, 2001 at 11:09:50AM -0600, Tim Tyler wrote:
> Ok I am intrigued.  I don't see a configuration option that would allow me
> to have Mailscanner use a different MTA for infected files only.  Is this
> something that would ultimately have to be developed into Mailscanner in the
> future or is this something I might be able to tweak?

For all messages that are *generated* by mailscanner, the "Sendmail" command
defined in mailscanner.conf is used. The desired mail is piped to the command,
and envelope information pulled from the headers.

So you could do pretty much whatever you like with that. It's not used for
anything else, but that's the kind of thing that you'd *really* need to test
every time you upgrade ;)

For messages that mailscanner has dumped directly into a queue, the "Sendmail2"
setting is used. There's not much point changing that too much, as the message
is placed in the queue rather than piped to the command.

Messages that mailscanner *generates* include:
        warnings to postmaster
        warnings to sender
        disinfected attachments sent to original recipient

Messages that mailscanner munges and dumps directly into the queue include:
        clean messages (hardly even munged!)
        messages that were dirty but have had dirty bits replaced with warnings

Armed with this information, you should be able to go away and decide whether
or not you want to modify the "Sendmail" setting, and if so, to what.

Any particularly magic recipies or plans of weasel-like cunning might be
worth posting here...



Cheers,


Nick

--
Nick Phillips -- nwp at lemon-computing.com
You are only young once, but you can stay immature indefinitely.



More information about the MailScanner mailing list