MailWatch and McAfee / Request and error

[Steve Freegard]

Hi Daniel,

The problem you're having with the reports has been reported by several
others - I think I've a workable solution which I'll test and release with
0.3.

I'll have a think about your feature request and see what I can do, probably
won't be able to do this until 0.4 though.

Kind regards,
Steve.


  _____

From: Daniel Zajd [mailto:daniel at ZAJD.COM]
Sent: 24 June 2003 23:57
To: MAILSCANNER at JISCMAIL.AC.UK


Thanks Steve!

The command works perfect!

Error?
My test server doesn't have a lot of emails passing MailScanner and
therefore not that much to store in the database and then for MailWatch to
work with. When I tried to create graphs though "Top Senders by Volume" or
"Top Recipients by Quantity" after just a few emails I got an error. Unable
to create graphs. No data available. But there is! This happened until the
size of the emails for an email address passed 1Mb. I get the feeling that
none of the email addresses under 1Mb counts. Could that be the case?

Request.
I'd like to be able to have a list of email addresses not to show in the
graphs. Example. I have one admin account on the top 10 list. I think that
this email shouldn't be there.

Thanks,
Daniel



Hi Daniel,

This should work:  define(VIRUS_REGEX, '/(.+) Found the (\S+) virus !!!/');

I've added it to the code for the next version.

Kind regards,
Steve.



  _____

From: Daniel Zajd [mailto:daniel at ZAJD.COM]
Sent: 21 June 2003 01:33
To: MAILSCANNER at JISCMAIL.AC.UK

I just have to say, Great work!!

But I need some help. How should the expression for McAfee look like?

The log look like this:
Jun 21 02:15:54 mail2 MailScanner[6710]: New Batch: Scanning 1 messages,
62658 bytes
Jun 21 02:15:54 mail2 MailScanner[6710]: Spam Checks: Starting
Jun 21 02:16:00 mail2 MailScanner[6710]: Virus and Content Scanning:
Starting
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said
"/dev/shm/6710/h5L0FoD9006755/dr.scr"
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said "        Found the
W32/Ganda at MM virus !!!"
Jun 21 02:16:03 mail2 MailScanner[6710]: /h5L0FoD9006755/dr.scr        Found
the W32/Ganda at MM virus !!!
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: McAfee found 1
infections
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: Found 1 viruses
Jun 21 02:16:04 mail2 MailScanner[6710]: Filename Checks: Possible virus
hidden in a screensaver (dr.scr)

And MailWatch show:
Report:  /h5L0FoD9006755/dr.scr        Found the W32/Ganda at MM virus !!!
Windows Screensavers are often used to hide viruses (dr.scr)

//Daniel Zajd
Mailsystem Sweden

--
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the sender and delete
the message from your mailbox.

This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.





--
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender and delete the message from your mailbox.

This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030625/d4f96ad1/attachment.html