Virus scanning spam

[paddy]

On Thu, May 27, 2004 at 08:39:37PM +0100, Julian Field wrote:
> At 20:31 27/05/2004, you wrote:
> >>From the MAQ:
> >
> >"16- Hey, MailScanner doesn't scan high scoring spam (or something I don't
> >"deliver")!
> >Anything which is not delivered or forwarded is not virus scanned. Here is
> >an explanation and workaround. Pretty simple, instead of not delivering,
> >do a store to an alias pointing to /dev/null. Thanks to Phil and Kai :)."
> >
> >Question: If the logical decision to do this is exactly as outlined in the
> >previous paragraph, (I don't do Perl so it would be difficult for me to
> >know), could one change the option to "anything that isn't delivered,
> >forwarded or stored" so that it would scan even high scoring spam that's
> >stored in the quarantine?
>
> I intentionally only ever put untouched mail in the quarantine. There isn't
> much point virus scanning something, throwing away the original content,
> and putting the results in the quarantine.

I think this has been mentioned either here or on the mailwatch list.

I've seen a behaviour where the file that ends up in the quarantine is
a mailscanner report (i think, this is a while ago), rather than the
attachment.  The workaround is to set "Quarantine Whole Messages = yes".

I meant to look into it, but it got burried in my todo list.

I have a system which I believe will still do this if you need it.

Regards,


Paddy

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html