Quarantined messages

Thu Dec 23 09:09:15 GMT 2004

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

MailWatch is an invaluable tool IMHO.  Setup is well documented, forums and
mailing lists of course.

I would highly recommend at least looking at it if you never have.

Tracy

----- Original Message -----
From: "Steen, Glenn" <Glenn.Steen at AP1.SE>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Thursday, December 23, 2004 2:44 AM
Subject: Re: Quarantined messages

> More like rfc822.
>
> I use MailWatch (http://mailwatch.sf.net) which needs the message in
> that
> format. Incidentally, all (or at least most) envelope info is stored in
> the MailWatch database, so there's really no need to save the queue
> files
> when using that. A very useful complement to MS, and what sold my PHB on
> the solution... Perhaps worth a look;).
>
> -- Glenn
>
> > -----Original Message-----
> > From: MailScanner mailing list
> > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Rodney Green
> > Sent: den 22 december 2004 18:37
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Quarantined messages
> >
> >
> > Glenn,
> >
> > CHMOD'ing it and touching the files did the trick. Thanks so much!
> >
> > If I were to set "Quarantine Whole Messages As Queue Files"
> > as no, would it
> > write the messages in mbox style format?
> >
> > Thanks again,
> > Rod
> >
> > -----Original Message-----
> > From: MailScanner mailing list
> > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
> > Of Steen, Glenn
> > Sent: Wednesday, December 22, 2004 12:03 PM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Quarantined messages
> >
> >
> > Try making sure they're "palatable" to postfix by
> > chmod 0700 <filenames>
> > touch <filenames>
> > ... and perhaps finish up with a "postkick public qmgr I" or somesuch.
> >
> > As you perhaps can guess I don't keep my quarantine as queue
> > files (very
> > little point in doing so, and MailWatch needs them "decoded")
> > so I've been
> > rediscovered some of the reasons I don't do that:-):-)
> >
> > A thought, perhaps one should look into making a "both"
> > option for this...
> > Would preserve the envelope info in the queue file, and the
> > "ease of use" of
> > having "decoded".
> >
> > -- Glenn
> >
> > > -----Original Message-----
> > > From: MailScanner mailing list
> > > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Rodney Green
> > > Sent: den 22 december 2004 17:51
> > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > Subject: Re: Quarantined messages
> > >
> > >
> > > Thanks for your help, Glenn. I've copied the message to the
> > > /var/spool/postfix/incoming/0 directory and ran postsuper
> > -s and they
> > > just sit there in that same directory. Don't know why they aren't
> > > being processed
> > >
> > >
> > > -----Original Message-----
> > > From: MailScanner mailing list
> > > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
> > > Of Steen, Glenn
> > > Sent: Wednesday, December 22, 2004 11:08 AM
> > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > Subject: Re: Quarantined messages
> > >
> > >
> > > Ok, then you have the queue files there. If one should follow
> > > the "postfix
> > > way" of reintroducing it, you should stop postfix, plop it
> > > into a suitable
> > > queue directory (perhaps /var/spool/postfix/incoming/<starting
> > > letter>/<fileanme>) make sure it is owned by the postfix
> > > user, postsuper -s,
> > > start postfix. I'm sure one could skip some of that... and do
> > > it more like
> > > MS does:)
> > >
> > > Sorry about the postdrop thing (it doesn't work).
> > >
> > > -- Glenn
> > >
> > > > -----Original Message-----
> > > > From: MailScanner mailing list
> > [mailto:MAILSCANNER at JISCMAIL.AC.UK]
> > > > On Behalf Of Rodney Green
> > > > Sent: den 22 december 2004 16:27
> > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > Subject: Re: Quarantined messages
> > > >
> > > >
> > > > That is set to yes.
> > > >
> > > > -----Original Message-----
> > > > From: MailScanner mailing list
> > [mailto:MAILSCANNER at JISCMAIL.AC.UK]
> > > > On Behalf Of Steen, Glenn
> > > > Sent: Wednesday, December 22, 2004 10:18 AM
> > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > Subject: Re: Quarantined messages
> > > >
> > > >
> > > > If they look OK with postcat, then they're in postfix
> > queue format,
> > > > else they might be damaged perhaps.
> > > >
> > > > Do you have
> > > > Quarantine Whole Messages As Queue Files = no
> > > > or yes?
> > > >
> > > > -- Glenn
> > > >
> > > > > -----Original Message-----
> > > > > From: MailScanner mailing list
> > > [mailto:MAILSCANNER at JISCMAIL.AC.UK]
> > > > > On Behalf Of Rodney Green
> > > > > Sent: den 22 december 2004 16:11
> > > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > > Subject: Re: Quarantined messages
> > > > >
> > > > >
> > > > > One think I noticed is that the message files have some weird
> > > > > characters in them and there are no line wraps. Not sure really
> > > > > which format these are in.
> > > > > I use "High Scoring Spam Actions = store" in my MS config
> > > > > file. Not sure
> > > > > what format that uses to store the messages.
> > > > >
> > > > > -----Original Message-----
> > > > > From: MailScanner mailing list
> > > [mailto:MAILSCANNER at JISCMAIL.AC.UK]
> > > > > On Behalf Of Steen, Glenn
> > > > > Sent: Wednesday, December 22, 2004 9:42 AM
> > > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > > Subject: Re: Quarantined messages
> > > > >
> > > > >
> > > > > If you keep your quarantined files as queue files you
> > > could use the
> > > > > postdrop -r</path/to/qfile command IIRC. Else use sendmail
> > > > > {possible at other.recipient} -t</path/to/message
> > > > >
> > > > > -- Glenn
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: MailScanner mailing list
> > > > [mailto:MAILSCANNER at JISCMAIL.AC.UK]
> > > > > > On Behalf Of Rodney Green
> > > > > > Sent: den 22 december 2004 15:16
> > > > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > > > Subject: Quarantined messages
> > > > > >
> > > > > >
> > > > > > Hello. When a message is quarantined as being spam, how do I
> > > > > > unquarantine it so it can be delivered to the user? I use
> > > > postfix as
> > > > > > my MTA.
> > > > > >
> > > > > > Thanks,
> > > > > > Rod
> > > > > >
> > > > > > ------------------------ MailScanner list
> > > > > ------------------------ To
> > > > > > unsubscribe, email jiscmail at jiscmail.ac.uk with the
> > > words: 'leave
> > > > > > mailscanner' in the body of the email. Before posting,
> > > > read the MAQ
> > > > > > (http://www.mailscanner.biz/maq/) and the archives
> > > > > > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > > > > >
> > > > > > Support MailScanner development - buy the book off
> > the website!
> > > > > >
> > > > >
> > > > > ------------------------ MailScanner list
> > > > ------------------------ To
> > > > > unsubscribe, email jiscmail at jiscmail.ac.uk with the
> > words: 'leave
> > > > > mailscanner' in the body of the email. Before posting,
> > > read the MAQ
> > > > > (http://www.mailscanner.biz/maq/) and the archives
> > > > > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > > > >
> > > > > Support MailScanner development - buy the book off the website!
> > > > >
> > > > > ------------------------ MailScanner list
> > > > ------------------------ To
> > > > > unsubscribe, email jiscmail at jiscmail.ac.uk with the
> > words: 'leave
> > > > > mailscanner' in the body of the email. Before posting,
> > > read the MAQ
> > > > > (http://www.mailscanner.biz/maq/) and the archives
> > > > > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > > > >
> > > > > Support MailScanner development - buy the book off the website!
> > > > >
> > > >
> > > > ------------------------ MailScanner list
> > > ------------------------ To
> > > > unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> > > > mailscanner' in the body of the email. Before posting,
> > read the MAQ
> > > > (http://www.mailscanner.biz/maq/) and the archives
> > > > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > > >
> > > > Support MailScanner development - buy the book off the website!
> > > >
> > > > ------------------------ MailScanner list
> > > ------------------------ To
> > > > unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> > > > mailscanner' in the body of the email. Before posting,
> > read the MAQ
> > > > (http://www.mailscanner.biz/maq/) and the archives
> > > > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > > >
> > > > Support MailScanner development - buy the book off the website!
> > > >
> > >
> > > ------------------------ MailScanner list
> > ------------------------ To
> > > unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> > > mailscanner' in the body of the email. Before posting, read the MAQ
> > > (http://www.mailscanner.biz/maq/) and the archives
> > > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > >
> > > Support MailScanner development - buy the book off the website!
> > >
> > > ------------------------ MailScanner list
> > ------------------------ To
> > > unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> > > mailscanner' in the body of the email. Before posting, read the MAQ
> > > (http://www.mailscanner.biz/maq/) and the archives
> > > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > >
> > > Support MailScanner development - buy the book off the website!
> > >
> >
> > ------------------------ MailScanner list ------------------------ To
> > unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> > mailscanner' in the body of the email. Before posting, read the MAQ
> > (http://www.mailscanner.biz/maq/) and the archives
> > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> > Support MailScanner development - buy the book off the website!
> >
> > ------------------------ MailScanner list ------------------------
> > To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> > 'leave mailscanner' in the body of the email.
> > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> > Support MailScanner development - buy the book off the website!
> >
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> --
> Oklahoma Network Consulting has scanned this
> message for viruses and dangerous content with
> MailScanner, and commercial virus scanners McAfee
> and F-Prot and is believed to be clean.
> ---
>

--
Oklahoma Network Consulting has scanned this
message for viruses and dangerous content with
MailScanner, and commercial virus scanners McAfee
and F-Prot and is believed to be clean.
---

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!