Log permitted filenames

Steve Freegard steve.freegard at LBSLTD.CO.UK
Thu Dec 4 12:49:23 GMT 2003

Nope ... It shouldn't make any difference to MailWatch as I don't scrape the
maillog for anything MailScanner related - I get everything I need from the


-----Original Message-----
From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
Sent: 04 December 2003 11:44
Subject: Re: Log permitted filenames

At 11:22 04/12/2003, you wrote:
>Don't know if this already exists or not but I'm looking to get a bit
>more out of the log permitted filenames option. Currently it generates
>Dec  2 06:55:16 $hostname MailScanner[11630]: Filename Checks: Windows/DOS
>Executable (patch.exe)
>What I think would be really usefull would be
>Dec  2 06:55:16 $hostname MailScanner[11630]: Filename Checks: Windows/DOS
>Executable (patch.exe) in $msgid
>Any ideas ?

Steve F -- Will this change upset MailWatch at all? I don't want to break

To get the extra logging, apply this patch to SweepOther.pm :

--- SweepOther.pm.old   2003-12-04 11:42:28.000000000 +0000
+++ SweepOther.pm       2003-12-04 11:42:43.000000000 +0000
@@ -197,8 +197,8 @@
            #print STDERR "\"$attach\" matched \"$regexp\" or \"$safename\"
            if ($allowdeny =~ 'deny') {
              # It's a rejection rule, so log the error.
-            MailScanner::Log::InfoLog("Filename Checks: %s (%s)",
-                                      $logtext, $attach);
+            MailScanner::Log::InfoLog("Filename Checks: %s (%s) in %s",
+                                      $logtext, $attach, $id);
              $message->{namereports}{$safename} .= "$usertext
              $message->{nametypes}{$safename}   .= "f";

Julian Field
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender and delete the message from your mailbox.

This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.

More information about the MailScanner mailing list