Virus scanning spam

[Alex Neuman]

Actually this is not what I meant. I mean I don't want viruses in my
quarantine, only high scoring spam. The problem with that approach is that
some viruses have such "spammy" characteristics that they wind up in
quarantine, and since they're not delivered then they're not virus scanned.
I'd like them to be scanned anyway. I'm only asking because if it were just
a toggle one could turn on and off, or have a ruleset for, it would really
help some setups, like most of mine.

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of paddy
Sent: Thursday, May 27, 2004 2:59 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Virus scanning spam


On Thu, May 27, 2004 at 08:39:37PM +0100, Julian Field wrote:
> At 20:31 27/05/2004, you wrote:
> >>From the MAQ:
> >
> >"16- Hey, MailScanner doesn't scan high scoring spam (or something I
don't
> >"deliver")!
> >Anything which is not delivered or forwarded is not virus scanned. Here
is
> >an explanation and workaround. Pretty simple, instead of not delivering,
> >do a store to an alias pointing to /dev/null. Thanks to Phil and Kai :)."
> >
> >Question: If the logical decision to do this is exactly as outlined in
the
> >previous paragraph, (I don't do Perl so it would be difficult for me to
> >know), could one change the option to "anything that isn't delivered,
> >forwarded or stored" so that it would scan even high scoring spam that's
> >stored in the quarantine?
>
> I intentionally only ever put untouched mail in the quarantine. There
isn't
> much point virus scanning something, throwing away the original content,
> and putting the results in the quarantine.

I think this has been mentioned either here or on the mailwatch list.

I've seen a behaviour where the file that ends up in the quarantine is
a mailscanner report (i think, this is a while ago), rather than the
attachment.  The workaround is to set "Quarantine Whole Messages = yes".

I meant to look into it, but it got burried in my todo list.

I have a system which I believe will still do this if you need it.

Regards,


Paddy

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html