Tagging virus

[Ugo Bellavance]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Robin, Rob wrote:
> All,
>
>         I search the archive w/ 'tag virus' 'virus tag', don't really find anything relevant.
>
>         I read through the .conf file, couldn't find anything. Chances are the answer is 'no', I am asking for the
> confirmation here. Or perhaps, I missed something in the config file.
>
>         Since virus scanner is not without false positive rate, however small it may be, it would be nice for me to simply tag the mails w/ just the subject line "{Virus?}" w/ the attachment intact. I am aware that there is a potential risk of software email client bug that can make such tagging ineffectual, I just would like to offer it to the customers. I am also very aware that some people just couldn't resist opening up the attachment :-) and need to protect themselves from themselves.
>
>         Right now, I have 'silently discard', 'tag and remove the attachment' option. I would like to add the option of 'tag while leaving the attachment intact'. I am extremely conservative in not losing any potential emails or benign attachments and thus see that the third choice might be preferable to some customers.
>
>         Is 'tagging w/o removing the attachment' supported in MailScanner ?

It is not in a stock install.  They can all be quarantined, though.

>
>         Please take my question as a strictly technical one not a policy one :-).
>
> Thanks,
> ------------------------
> Rob Robin
> Network Analyst
> Green Apple, Inc.
> 740-653-9890
> rrobin at greenapple.com
> www.greenapple.com
> Internet access, hosting and development solutions since 1995.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!