Selectively quarantining on virus name

[Julian Field]

At 12:17 21/08/2003, you wrote:
> > At 17:49 20/08/2003, you wrote:
> > >        I presume that a rules file attached to the "Quarantine
> > >Infections" option uses the usual From or To type rules?
> >
> > Yes, just like any other ruleset.
>
>I have created a quarantine.rules file and in it I have placed:
>FromOrTo:       W32\/Sobig-F    no

Eh? Rulesets test addresses, not virus names. "FromOrTo" doesn't make much
sense with a virus name, does it?

You can't currently selectively not archive something because of the
particular virus in it.


>But I'm still seeing the sobig-f variant being quarantined, can
>anyone assist?
>
>Andy

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support