I'm lost: Virus: keyword in ruleset - is this a limitation?

[Yeo Chit Loong]

(Apologies for sending this to announce list previously)
Hi everyone,

I like to know if there are any more references to the usage of the
keyword "Virus:" in rulesets?

**What I have done:
I've done searches on google, the archives and mailinglist and whatever
FAQ (even several foreign language forums) for the past 10 hours.

But most of the examples are concentrated on filtering by domain and/or
regexs.
the EXAMPLES file only shows Virus: <virus name> <yes | no >

I think I've actually missed out the documents on the ruleset syntax, but
I've figured out it's something as follows:
<ruletype>: <domain | virusname | default> < yes | no | address >

Please correct me if I'm wrong.


**What I want to do:
For example, I want to MS to send me notices if it is a virus infection
(some virus) and not events like "Bad Filename",

At the same time, I like another person to receive "Other bad content
detected" notices and another list of virus.

In other words:
1) if virus "virus" detected - email to account1
2) emails with "bad filename" errors - > /dev/null  ELSE email to
account1
3) if virus "anothervirus" detected - email to account2

Is this a limitation of MS or am I missing out something here?

Thanks!

Best regards,
Yeo Chit Loong
MIS - Systems Administrator
(mcse/sa,ccna)



------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!