Silent Virus & Notify Senders

[Stijn Jonker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Julian,

I didn't try the patch yet, but I want to thank you, I currently work
with 2 commercial vendors that I would like to have the ordering
consitent in the web interface. They are both looking at my patches for
over an week now...

With MS, the initial reply is after a little over 2 hours, and this
reply ALLREADY includes a patch.

Julian Field said the following on 08/02/2003 07:28 PM:
| Quoting Stijn Jonker <SJCJonker at SJC.NL>:
|
|>I'm trying to fine tune the virus reporting to the senders of email,
|>
|>Initially I had an rule where for all local domains reporting was on,
|>and the default was off.
|>
|>Recently people have tried to transfer exe files, they where legit, as
|>they where updates from the official vendor of an piece of software.
|>(This user isn't very technical, so it was send as an self exec zip
|>archive).
|>
|>MailScanner nicely intercepted the email, but off course didn't notify
|>the sender, as the rules dictate.
|>
|>I'm looking for a way to do sender notification as mentioned below:
|>
|>Disallowed filename && !Virus   yes
|>Disallowed filetype && !Virus   yes
|>Virus                           no
|>HTML-Form                       yes
|>HTML-Codebase                   no
|>HTML-IFrame                     yes
|>
|>If this isn't possible with the current code, maybe an option for silent
|>viruses in the area of:
|>
|>Silent Viruses = HTML-Codebase ALLViruses
|
|
| The "HTML-Codebase" in that line already works, I've done that.
| The "ALLViruses" doesn't work yet, but should be pretty easy to
implement. I
| probably won't call it exactly that, but something close to that
| ("All-Viruses" perhaps).
|
| Please try the attached patch
| to /usr/lib/MailScanner/MailScanner/SweepViruses.pm as it should do
what you
| want. The magic keyword is indeed "All-Viruses" (but it doesn't matter
about
| upper/lower case.
|
|
|>If the above change is required, i'll dive into the perl code, and see
|>if i can manage to make a patch to do this..
|>
|>Julian, are you willing to add this, when and if I provide the patch?
|
|
| --
| Jules
| jkf at ecs.soton.ac.uk
| mailscanner at ecs.soton.ac.uk

- --
Met Vriendelijke groet/Yours Sincerely
Stijn Jonker <SJCJonker at sjc.nl>
-----BEGIN PGP SIGNATURE-----

iD8DBQE/K/rrjU9r45tKnOARAnCVAJ0Rvg2FhtgW8bzAkX8x2HPrLJgnjACgoVbd
PASBOpQDDhCJb9NGG/gQyp0=
=95Lw
-----END PGP SIGNATURE-----