Sender reports

Julian Field mailscanner at ecs.soton.ac.uk
Sat Sep 28 01:14:19 IST 2002


Well spotted. I had "$logtext" and "$usertext" the wrong way round in line
163 of SweepOther.pm, if you want to fix it yourself. The fix will be in
the next release of V4.
If that's the worst that is wrong with it now, I'm pretty happy :-)

At 21:35 27/09/2002, you wrote:
>Julian, in 3.x when a blocked attachment was blocked, the message sent
>back to the sender, contained info from the fourth column in the
>filenames.rules.conf, but in 4.0 it doesn't seem to include this info.
>Example, the .reg rule has a 4th column of "Windows registry entries are
>very dangerous in email" but this is missing in the report back.
>
>
>The following e-mail messages were found to have viruses in them:
>
>     Sender: root at med.wayne.edu
>IP Address: 146.9.19.19
>  Recipient: brose at med.wayne.edu
>    Subject: etst
>  MessageID: g8RKJviZ012777
>     Report: Possible Windows registry attack (crontab.reg)

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ



More information about the MailScanner mailing list