Feature Wish, IP Pool Warning

Tony Finch dot at DOTAT.AT
Thu Sep 4 13:22:17 IST 2003


Matt <hciss at HCIWS.COM> wrote:
>Sobig.x lies about its from email address so I have it setup as silent.  But
>what I would like is if it email me a warning to the postmaster account ONLY
>if the source IP is in one the IP pools I own.  This way I can look in my
>PPP logs, see who had that IP at that time and drop them an email or call.

Look at the "Send Notices" option in MailScanner.conf. It can be a ruleset,
which can match on the IP address of the sending host. (I don't know if it
works for silent viruses...)

Tony.
--
f.a.n.finch  <dot at dotat.at>  http://dotat.at/
DOVER WIGHT: EAST VEERING SOUTHEAST 3 OR 4. FAIR. GOOD..



More information about the MailScanner mailing list