Disinfected: To provide a link to anot... (fwd)

Jeff A. Earickson jaearick at COLBY.EDU
Wed May 8 01:53:50 IST 2002

Hey mailscanner gurus,
   I got the blurb below from mailscanner telling about its good work.
I wanted to know more about this message, so I grepped my syslogs for
message ID g47N1Dt11680.  Lo and behold, there was no record of it my
my syslog at all.  When "Sendmail::SendEntity($top);" is invoked in
disinfect.pl, how come this message doesn't get syslogged like it
should?  Is mailscanner generating a lot stealth emails like this,
with no record in the syslog?  This is bad news...

** Jeff A. Earickson, Ph.D                         PHONE: 207-872-3659
** Senior UNIX Sysadmin, Information Technology    EMAIL: jaearick at colby.edu
** Colby College, 4214 Mayflower Hill,               FAX: 207-872-3076
** Waterville ME, 04901-8842

---------- Forwarded message ----------
Return-Path: <postmaster at colby.edu>
Received: (from root at localhost)
        by host-11.colby.edu (8.11.6/8.11.6/1.23') id g47N1Dt11680;
        Tue, 7 May 2002 19:01:15 -0400 (EDT)
Date: Tue, 7 May 2002 19:01:15 -0400 (EDT)
Message-Id: <200205072301.g47N1Dt11680 at host-11.colby.edu>
Content-Type: multipart/mixed; boundary="----------=_1020812458-19972-5"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: MailScanner <postmaster at colby.edu>
To: <postmaster at colby.edu>
Subject: Disinfected: To provide a link to anot...
X-Mailer: MailScanner
X-Mailscanner: Disinfected

A message you recently received from "<tpin at mint.net>" with the
subject "To provide a link to another"
contained one or more viruses that could be disinfected.

The viruses have been removed, and the disinfected files are attached
to this message.
Email Virus Scanner

More information about the MailScanner mailing list