Questions about how MailScanner deals with mails to be quarantined

[James Ogley]

> The individual "Report" lines in the mail to the sysadmin give the exact
> reason the message was stopped.

That much is certainly true :)

> The Subject: line is always the same (just makes it easier to filter on). I
> didn't really intend human beings to read every admin notification. Most
> sysadmins don't have the time to read stuff like this anyway.

Well, we tend to skim the subject lines, unless something looks like we
need to attend to it, only then do we actually read the mail, and then
to verify which machine sent it (we have multiple sweepers for
resiliency).  Obviously on MScanner, we'd include the machine name in
our report mails :)

Having the actual reason a mail was stopped in the Subject: line makes
this a lot easier.

> That's all down to what you put in the VirusWarning.txt file, which you
> might well rename as well.

I realise that, but it still delivers the rest of the mail, doesn't it?
Also, there the option to only notify/deliver disinfected to the
recipient on certain reasons for quarantining would be helpful (eg, we
notify recipients of large mails, but not executables or videos).
--
James Ogley, Unix Systems Administrator, Pinnacle Insurance Plc
Work: james.ogley at pinnacle.co.uk www.pinnacle.co.uk +44 (0) 20 8731 3619
Personal: james at rubberturnip.org.uk www.rubberturnip.org.uk
Updated GNOME RPMs for SuSE Linux: www.usr-local-bin.org


***********************************************************************
CONFIDENTIALITY. This e-mail and any attachments are
confidential and may also be privileged. If you are not the
named recipient, please notify the sender immediately and
do not disclose the contents to another person, use it for any
purpose, or store or copy the information in any medium. Any
views expressed in this message are those of the individual
sender, except where the sender specifically states them to
be the views of Pinnacle Insurance Plc.

If you have received this e-mail in error please immediately
notify our Helpdesk on +44 (0) 20 8207 9555.

This footnote also confirms that this email message has been
swept by MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************