Logging style request

Patterson S.R. S.R.Patterson at SOTON.AC.UK
Wed Sep 11 13:41:59 IST 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

When you get a chance would you consider altering the logging code for
matches on filename rules to have an identifiable tag. E.g. instead of
logging:

"Executable file in filename.exe" and "Possible MS-Dos shortcut attack
in filename.pif"

Log:

"Filename Rules: Executable file in filename.exe" and "Filename rules:
Possible MS-Dos shortcut attack in filename.pif"

This would help enourmously in the processing of my sendmail logs.  I
realise I could do this simply by editing filename-rules.conf, but it
seems it would be clearer if everyone had this benefit?

Cheers, Steve
- --
Steven Patterson MSci.  Tel: +44 (0)2380 595810
Electronic Information Systems Support and Development
Computing Services, University of Southampton, UK.
Public PGP Key: http://www.soton.ac.uk/~srp/pubkey.asc

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4

iQA/AwUBPX86Fq2fOiTs5+WvEQLKXwCfWKarWJm+wOzojokS7uoKqO+YQ10AoN5O
kdpdCsYmYAwwP25WzDHcACsS
=MCNp
-----END PGP SIGNATURE-----



More information about the MailScanner mailing list