Log permitted filenames

[Steve Freegard]

Nope ... It shouldn't make any difference to MailWatch as I don't scrape the
maillog for anything MailScanner related - I get everything I need from the
database.

Cheers,
Steve.

-----Original Message-----
From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
Sent: 04 December 2003 11:44
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Log permitted filenames


At 11:22 04/12/2003, you wrote:
>Don't know if this already exists or not but I'm looking to get a bit
>more out of the log permitted filenames option. Currently it generates
>Dec  2 06:55:16 $hostname MailScanner[11630]: Filename Checks: Windows/DOS
>Executable (patch.exe)
>What I think would be really usefull would be
>Dec  2 06:55:16 $hostname MailScanner[11630]: Filename Checks: Windows/DOS
>Executable (patch.exe) in $msgid
>
>Any ideas ?
>
>Uly

Steve F -- Will this change upset MailWatch at all? I don't want to break
anything...

To get the extra logging, apply this patch to SweepOther.pm :

--- SweepOther.pm.old   2003-12-04 11:42:28.000000000 +0000
+++ SweepOther.pm       2003-12-04 11:42:43.000000000 +0000
@@ -197,8 +197,8 @@
            #print STDERR "\"$attach\" matched \"$regexp\" or \"$safename\"
did\n";
            if ($allowdeny =~ 'deny') {
              # It's a rejection rule, so log the error.
-            MailScanner::Log::InfoLog("Filename Checks: %s (%s)",
-                                      $logtext, $attach);
+            MailScanner::Log::InfoLog("Filename Checks: %s (%s) in %s",
+                                      $logtext, $attach, $id);
              $message->{namereports}{$safename} .= "$usertext
($safename)\n";
              $message->{nametypes}{$safename}   .= "f";
              $counter++;

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654

--
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender and delete the message from your mailbox.

This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.