Don't Quarantine Viruses

Eric Dantan Rzewnicki rzewnickie at RFA.ORG
Thu Jan 29 22:32:24 GMT 2004


Do these names have to match the name as reported by the virus scanners?
or is it case insensitive?

i.e., will:

Virus:   mydoom    no

prevent mydoom from being quarantined when caught by either sophossavi
or uvscan?

or do I need to do this? :

Virus:   W32/MyDoom-A      no
Virus:   W32/Mydoom.a at MM   no


Thanks,
Eric Rz.

On Wed, Jan 28, 2004 at 02:55:11PM -0500, Hirsh, Joshua wrote:
> > I'd like to be able to not quarantine viruses but still
> > quarantine filetype denies.
>
> Yup, you can distinguish between the two. You can set "Quarantine
> Infections" to match against a rule, and in the rules file have something
> like this:
>
> Virus:  sobig           no
> Virus:  dumaru  no
> Virus:  mimail  no
>
>
> Etc..
>
>
>  Cheers,
>
> -Joshua



More information about the MailScanner mailing list