feature request

[Tony Finch]

Julian Field <mailscanner at ECS.SOTON.AC.UK> wrote:
>At 13:36 02/09/2003, you wrote:
>>What is the possibility of including the sending IP address in the virus
>>lines in the log file entries?
>
>Please can you give me an example of what log entries you mean.

In amongst my ever-increasing logging patches I have the following.
I haven't decided whether to log the virus name(s) as well -- that might
not be a good idea with multiple virus scanners; alternatively I might
want to optionally disable the logging of the output from the scanners
themselves in order to reduce log volume.

--- SweepViruses.pm     4 Jul 2003 19:13:31 -0000       1.10
+++ SweepViruses.pm     26 Aug 2003 10:03:53 -0000      1.11
@@ -508,6 +508,9 @@
       next unless $text;
       $message->{virusreports}{"$attachment"} .= $text;
     }
+    MailScanner::Log::InfoLog("Infected message %s came from %s",
+                             $id, $message->{clientip})
+        if MailScanner::Config::Value('logipaddrs');
   }

   # And then all the report types...
--- ConfigDefs.pl       25 Jul 2003 10:09:00 -0000      1.13
+++ ConfigDefs.pl       26 Aug 2003 10:03:53 -0000      1.14
@@ -88,6 +88,7 @@
 logfacility                    = syslogfacility
 logformtags                    = loghtmlformtags
 logobjecttags                  = logobjectcodebasetags
+logipaddrs                     = loginfectedipaddresses
 maxdirtybytes                  = maxunsafebytesperscan
 maxdirtymessages               = maxunsafemessagesperscan
 maxmessagesize                 = maximummessagesize
@@ -145,6 +146,7 @@
 logspam                        1       no      0       yes     1
 lognonspam             0       no      0       yes     1
 logmessageids          0       no      0       yes     1
+logipaddrs             0       no      0       yes     1
 expandtnef             1       no      0       yes     1
 showscanner            0       no      0       yes     1
 spamassassinautowhitelist 1    no      0       yes     1


Tony.
--
f.a.n.finch  <dot at dotat.at>  http://dotat.at/
MULL OF KINTYRE TO ARDNAMURCHAN POINT: NORTHWEST BACKING SOUTHWEST 3 OR 4.
CLOUDY, RAIN THEN SHOWERS, BECOMING DRY, FAIR LATER. GOOD FALLING MODERATE IN
RAIN OR SHOWERS. SLIGHT.