MailScanner feature request

[Julian Field]

If that does just what you are looking for, I'll add it into the main code.

At 13:25 04/09/2003, you wrote:
>"Rose, Bobby" <brose at MED.WAYNE.EDU> wrote:
> >Is it possible to have MailScanner note the Sender IP in the logs for a
> >message that it finds a virus on.  That'll make it easier to pull out
> >the people that are pounding the heck out of MailScanner so that the can
> >just just be blocked entirely.
>
>Try this patch which I posted recently, and add to MailScanner.conf
>         Log Infected IP Addresses = yes
>
>--- SweepViruses.pm     4 Jul 2003 19:13:31 -0000       1.10
>+++ SweepViruses.pm     26 Aug 2003 10:03:53 -0000      1.11
>@@ -508,6 +508,9 @@
>        next unless $text;
>        $message->{virusreports}{"$attachment"} .= $text;
>      }
>+    MailScanner::Log::InfoLog("Infected message %s came from %s",
>+                             $id, $message->{clientip})
>+        if MailScanner::Config::Value('logipaddrs');
>    }
>
>    # And then all the report types...
>--- ConfigDefs.pl       25 Jul 2003 10:09:00 -0000      1.13
>+++ ConfigDefs.pl       26 Aug 2003 10:03:53 -0000      1.14
>@@ -88,6 +88,7 @@
>  logfacility                    = syslogfacility
>  logformtags                    = loghtmlformtags
>  logobjecttags                  = logobjectcodebasetags
>+logipaddrs                     = loginfectedipaddresses
>  maxdirtybytes                  = maxunsafebytesperscan
>  maxdirtymessages               = maxunsafemessagesperscan
>  maxmessagesize                 = maximummessagesize
>@@ -145,6 +146,7 @@
>  logspam                        1       no      0       yes     1
>  lognonspam             0       no      0       yes     1
>  logmessageids          0       no      0       yes     1
>+logipaddrs             0       no      0       yes     1
>  expandtnef             1       no      0       yes     1
>  showscanner            0       no      0       yes     1
>  spamassassinautowhitelist 1    no      0       yes     1
>
>
>Tony.
>--
>f.a.n.finch  <dot at dotat.at>  http://dotat.at/
>LUNDY: EASTERLY VEERING SOUTHERLY 3 OR 4. FAIR. GOOD.

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support