don't quarantine silent viruses?

Marcin Rozek marcin.rozek at IOS.EDU.PL
Wed May 26 16:26:23 IST 2004


Julian Field wrote:
>> Great! Good way to kick me into interest of rulesets :)
>> My first thought was is it possible to add a keyword to rulesets eg.
>> SilentViruses so we could list all silent viruses in Mailscanner.conf and
>> refer to them in rulesets instead of listing each of them in *.rules.
>> eg:
>> Virus:          SilentViruses           no/yes
> Do remember that the "Quarantine Silent Viruses" option will be in the next
> release anyway, so you don't need to spend too much effort on this. Next
> release due 1st June.
I remember. But this could be useful to use in other rulesets, eg. i set a
ruleset for "Send Notices":
From:   192.168.1       yes
Virus:  bagle           no
Virus:  netsky          no
(10 more entries)
Virus:  default         yes

Instead, the ruleset could look like this:
From:   192.168.1.      yes
Virus:  SilentViruses   no
Virus:  default         yes

When new virus reveal himself and we would like to treat it as 'silent virus' we
could add it to 'Silent Viruses' in Mailscanner.conf and that's - now we have to
add it to each ruleset.
This isn't much important but seeing it in the future would be nice :)

--
Best regards,
Marcin

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list