Tagging the subject line of e-mail

[Ash]

Found the file MailScanner/etc/reports/en/languages.conf and changed

NoticeSubject to "Warning: E-mail problem detected"

also

NoticeHeading to "The following e-mail messages were found to have
problems in them"

ash

Ash wrote:
> Please forgive me the problem lay between the keyboard and back of chair
> :-(. I missed Deliver Cleaned Messages was set to no I would say this
> occured when I upgraded from v3.x and as we dont get many viruses I
> never noticed, wrote a ruleset and it all works.
>
> Have I made another mistake somewhere? the admin message is the same no
> matter what problem it deteced.  "Warning: E-mail viruses detected"
> appears for every violation and doesnt actually align with the problem
> it detected, ie "Warning: Bad Filename detected" or Warning: Bad
> Filetype detected" .
>
> ash
>
> Julian Field wrote:
>
>> Can you give us an example of what you mean?
>>
>> At 04:54 01/09/2003, you wrote:
>>
>>> Did this ever get resolved?
>>>
>>> I just upgraded from 4.21-9 to 4.23-10 and nolonger get any of the
>>> subject
>>> line modifications notices that use the curly brackets, other than if
>>> I set
>>> "Scanned Modify Subject" , for example any violation be it a virus
>>> ,bad file
>>> name/type receives the subject line "Warning: E-mail viruses
>>> detected", I
>>> haven't had a spam message yet to see if that notification has also
>>> stopped
>>> working
>>>
>>> from my conf file
>>> Virus Modify Subject = yes
>>> Virus Subject Text = {Virus?}
>>> Filename Modify Subject = yes
>>> Filename Subject Text = {Filename?}
>>> Content Modify Subject = yes
>>> Content Subject Text = {Dangerous Content?}
>>> Spam Modify Subject = yes
>>> Spam Subject Text = {Spam?}
>>> High Scoring Spam Modify Subject = yes
>>> High Scoring Spam Subject Text = {Spam?}
>>>
>>> running perl 5.6.0
>>>
>>> regards
>>>
>>> ash
>>>
>>> On Wed, 20 Aug 2003 07:41:27 -0400, Collins, Kevin
>>> <KCollins at NESBITTENGINEERING.COM> wrote:
>>>
>>> >Mike,
>>> >
>>> >Thanks for responding.
>>> >
>>> >I'm planning on adding SpamAssassin later in the project.  Is it
>>> required to
>>> >make the system function as I want?  I didn't get that from the
>>> >documentation.  They way I read the docs, SpamAssassin just improves
>>> >MailScanner's abilities.
>>> >
>>> >Kevin
>>> >
>>> >> -----Original Message-----
>>> >> From: Mike Kercher [mailto:mike at CAMAROSS.NET]
>>> >> Sent: Tuesday, August 19, 2003 1:59 PM
>>> >> To: MAILSCANNER at JISCMAIL.AC.UK
>>> >> Subject: Re: Tagging the subject line of e-mail
>>> >>
>>> >>
>>> >> Are you using SpamAssassin?  If not, I'd HIGHLY recommend it!
>>> >>  You can also
>>> >> set Log Spam = yes and watch your maillog after restarting
>>> >> MailScanner.
>>> >>
>>> >> Mike
>>> >>
>>> >>
>>> >> -----Original Message-----
>>> >> From: MailScanner mailing list
>>> >> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
>>> >> Of Collins, Kevin
>>> >> Sent: Tuesday, August 19, 2003 12:31 PM
>>> >> To: MAILSCANNER at JISCMAIL.AC.UK
>>> >> Subject: Tagging the subject line of e-mail
>>> >>
>>> >>
>>> >> Hi!
>>> >>
>>> >> I've just completed installing MS v4.22-5 onto a Red Hat 8
>>> >> machine to act as
>>> >> my company's "SPAM Filter".  First, I want to say THANKS for
>>> >> creating such a
>>> >> project and for making it available to the masses for free.
>>> >>
>>> >> A little background:
>>> >>
>>> >> MailScanner machine:
>>> >> Red Hat 8.0 (fully up2dated)
>>> >> Sendmail 8.12.8
>>> >> Perl 5.8.0
>>> >> ClamAV 0.60 (compiled from source)
>>> >> Sendmail set to relay everything to internal Exchange Server
>>> >>
>>> >> Everything seems to be working fine - I've even let a few e-mails
>>> pass
>>> >> through the machine for testing.  Which is why I'm writing; I
>>> >> now have a
>>> >> question.
>>> >>
>>> >> First, of the 20 some odd messages that have passed through
>>> >> MailScanner, it
>>> >> has tagged 3 as SPAM and one of them as having a Virus
>>> >> (actually it was an
>>> >> HTML Form in the message).  The "Virus" message behaved as
>>> >> expected - the
>>> >> e-mail was deleted and not passed on and I got a notification of the
>>> >> deletion.  But the remaining messages aren't working as I
>>> >> expected them to
>>> >> (I think).
>>> >>
>>> >> I've configured MailScanner to modify the subject line of
>>> >> every e-mail it
>>> >> touches to include {Scanned} at the beginning. (This is to
>>> >> let me - and
>>> >> everyone else - know that MS is working)  In addition I want all SPAM
>>> >> messages flagged with {Spam} as the beginning of the subject line and
>>> >> {Virus} for those that were found to have Viruses.
>>> >>
>>> >> To this point, all of the e-mail coming in (save the "Virus" message
>>> >> mentioned above) have only had the word {Scanned} pre-pended
>>> >> to the Subject
>>> >> Line.  I've not seen the {Spam} label anywhere.  Here are the
>>> >> (I think)
>>> >> appropriate sections of the MailScanner.conf:
>>> >>
>>> >> --<snip>--
>>> >> Scanned Modify Subject = start
>>> >> Scanned Subject Text = {Scanned}
>>> >> Virus Modify Subject = yes
>>> >> Virus Subject Text = {Virus}
>>> >> Filename Modify Subject = yes
>>> >> Filename Subject Text = {Filename}
>>> >> Spam Modify Subject = yes
>>> >> Spam Subject Text = {Spam}
>>> >> High Scoring Spam Modify Subject = yes
>>> >> High Scoring Spam Subject Text = {Spam}
>>> >> --<snip>--
>>> >> Spam Checks = yes
>>> >> Spam List = ORDB-RBL Infinite-Monkeys # MAPS-RBL+ costs money (except
>>> >> .ac.uk)
>>> >> Spam Domain List =
>>> >> Spam Lists To Reach High Score = 5
>>> >> Spam List Timeout = 10
>>> >> Max Spam List Timeouts = 7
>>> >> Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules
>>> >> Is Definitely Spam = no
>>> >> --<snip>--
>>> >>
>>> >> >From this, is my description of how MailScanner should work valid?
>>> >> >Have I
>>> >> forgot to do something?  What do I need to change/add/delete
>>> >> to make it work
>>> >> as I describe?
>>> >>
>>> >> Thanks in advance.
>>> >>
>>> >> --
>>> >> Kevin L. Collins, MCSE
>>> >> Systems Manager
>>> >> Nesbitt Engineering, Inc.
>>> >>
>>
>>
>>
>> --
>> Julian Field
>> www.MailScanner.info
>> MailScanner thanks transtec Computers for their support