MailWatch and McAfee / Request and error

[Daniel Zajd]

Thanks Steve!

The command works perfect!

Error?
My test server doesn¹t have a lot of emails passing MailScanner and
therefore not that much to store in the database and then for MailWatch to
work with. When I tried to create graphs though ³Top Senders by Volume² or
³Top Recipients by Quantity² after just a few emails I got an error. Unable
to create graphs. No data available. But there is! This happened until the
size of the emails for an email address passed 1Mb. I get the feeling that
none of the email addresses under 1Mb counts. Could that be the case?

Request.
I¹d like to be able to have a list of email addresses not to show in the
graphs. Example. I have one admin account on the top 10 list. I think that
this email shouldn¹t be there.

Thanks,
Daniel

> Hi Daniel,
>  
> This should work:  define(VIRUS_REGEX, '/(.+) Found the (\S+) virus !!!/');
>  
> I've added it to the code for the next version.
>  
> Kind regards,
> Steve.
> 
> 
> 
> From: Daniel Zajd [mailto:daniel at ZAJD.COM]
> Sent: 21 June 2003 01:33
> To: MAILSCANNER at JISCMAIL.AC.UK
> 
> I just have to say, Great work!!
> 
> But I need some help. How should the expression for McAfee look like?
> 
> The log look like this:
> Jun 21 02:15:54 mail2 MailScanner[6710]: New Batch: Scanning 1 messages, 62658
> bytes 
> Jun 21 02:15:54 mail2 MailScanner[6710]: Spam Checks: Starting
> Jun 21 02:16:00 mail2 MailScanner[6710]: Virus and Content Scanning: Starting
> Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said
> "/dev/shm/6710/h5L0FoD9006755/dr.scr"
> Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said "        Found the
> W32/Ganda at MM virus !!!"
> Jun 21 02:16:03 mail2 MailScanner[6710]: /h5L0FoD9006755/dr.scr        Found
> the W32/Ganda at MM virus !!!
> Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: McAfee found 1
> infections 
> Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: Found 1 viruses
> Jun 21 02:16:04 mail2 MailScanner[6710]: Filename Checks: Possible virus
> hidden in a screensaver (dr.scr)
> 
> And MailWatch show:
> Report:  /h5L0FoD9006755/dr.scr        Found the W32/Ganda at MM virus !!!
> Windows Screensavers are often used to hide viruses (dr.scr)
> 
> //Daniel Zajd
> Mailsystem Sweden
> 
> --
> This email and any files transmitted with it are confidential and intended
> solely for the use of the individual or entity to whom they are addressed. If
> you have received this email in error please notify the sender and delete the
> message from your mailbox.
> 
> This footnote also confirms that this email message has been swept by
> MailScanner (www.mailscanner.info) for the presence of computer viruses.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030625/ca124453/attachment.html