what are you rude?.. heres a copy of what I sent you a week a go.try reading it

Julian Field jkf at ecs.soton.ac.uk
Thu Sep 12 16:50:55 IST 2002


At 16:41 12/09/2002, you wrote:
>Thanks for pointing that out for me. Pete Peters answered me the same tip
>3 days ago.
> >>> Virus' line in the UNIX Maillog comes from Mailscanner. Thats why I
> asked it as a MailScanner issue and not UNIX. After all it is in the
> mailscanner code to add '>>>Virus' in the UNIX SEndmail Log File. Not
> UNIX Itself right?

Neither. It's in the output from the virus scanner engine.

>
>
>
>Matt Doherty
>IT Dept
>Datawatch Corp
>
> >>In a world without walls or fences, who needs Windows and Gates?<<
>-----Original Message-----
>From: Patterson S.R. [mailto:S.R.Patterson at SOTON.AC.UK]
>Sent: Thursday, September 12, 2002 12:20 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: what are you rude?.. heres a copy of what I sent you a week a
>go.try reading it
>
>Your answer is:
>
>grep '>>> Virus' maillog
>
>Note the single quotes.  They stop the ">" characters from having a
>meaning to the shell.  Make sure you use the ones which slope from
>bottom-left to top-right (or look straight upright), NOT the ones which
>slope top-left to bottom-right, as they do something completely different.
>
>This is a UNIX question, not a mailscanner question.
>
>--
>Steven Patterson MSci.  Tel: +44 (0)2380 595810
>Electronic Information Systems Support and Development
>Computing Services, University of Southampton, UK.
>Public PGP Key:
><http://www.soton.ac.uk/~srp/pubkey.asc>http://www.soton.ac.uk/~srp/pubkey.asc
>
>-----Original Message-----
>From: Matt Doherty [mailto:Matthew_doherty at DATAWATCH.COM]
>Sent: 12 September 2002 15:40
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: what are you rude?.. heres a copy of what I sent you a week ago.
>try reading it
>
>such as
>
>
>
>Matt Doherty
>IT Dept
>Datawatch Corp
>
> >>In a world without walls or fences, who needs Windows and Gates?<<
>-----Original Message-----
>From: Matt Doherty [mailto:Matthew_doherty at datawatch.com]
>Sent: Monday, September 09, 2002 4:34 PM
>To: MailScanner mailing list
>Subject: RE: New release logging suggestions
>
>I would like to see some differant text in the log per email virus
>caught.. I grep the maillog to see how many viruses caught so far that
>week. For instance, I currently tried 'tail -2000 /var/log/maillog |
>grep >>>Virus' of course the ">" symbols something that messes grep up and
>wont work. The only string that works best is just use the word Virus (
>tail -2000 /var/log/maillog | grep Virus ) Only thing is, it shows the
>mailscanner restarting every four hours lines as well as the viruses
>caught. I cant think of anything good but maybe some weird character that
>is never seen in the maillog such as a & or pipe symbol? Just something
>that grep could sniff out easily ONLY for caught viruses. Or do you have a
>better solution? The Email ID to go along with it as well would be nice.
>for ones that were scanned and ones that were found to be infected.
>Hope that is a ok suggestion..
>Oh well Im still a newbie anyways 8-)
>
>
>Matt Doherty
>IT Dept
>Datawatch Corp
>
> >>In a world without walls or fences, who needs Windows and Gates?<<
>-----Original Message-----
>From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
>Sent: Monday, September 09, 2002 5:14 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: New release logging suggestions
>
>The new release is getting there...
>
>What logging would people like to see?
>Anything particular that you want logged?
>
>Suggestions please.
>--
>Julian Field Teaching Systems Manager
>jkf at ecs.soton.ac.uk Dept. of Electronics & Computer Science
>Tel. 023 8059 2817 University of Southampton
>Southampton SO17 1BJ

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20020912/0d2f4759/attachment.html


More information about the MailScanner mailing list