don't quarantine silent viruses?

[Julian Field]

At 13:33 26/05/2004, you wrote:
>Patel, Anjana wrote:
>>In MailScanner.conf:
>>Quarantine Infections = %rules-dir%/quarantine.rules
>>Example quarantine.rules file:
>>Virus:          bagle           no
>>Virus:          dumaru          no
>(cut)
>>Virus:          default         yes
>>Hope this helps
>Great! Good way to kick me into interest of rulesets :)
>My first thought was is it possible to add a keyword to rulesets eg.
>SilentViruses so we could list all silent viruses in Mailscanner.conf and
>refer
>to them in rulesets instead of listing each of them in *.rules.
>eg:
>Virus:          SilentViruses           no/yes
>Now when new mass-mailing worm appears we'll have to modify all *.rules
>instead
>of adding this to Silent Viruses in Mailscanner.conf.
>
>And just to be sure... rulesets are checked until first match?
>eg.:
>From:   192.168.1.      yes
>Virus:  bagle           no
>and the mail with bagle worm comes from 192.168.1.1 - 'yes' will be taken
>as an
>action?

Do remember that the "Quarantine Silent Viruses" option will be in the next
release anyway, so you don't need to spend too much effort on this. Next
release due 1st June.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html