quarantine report running amok

Julian Field MailScanner at ecs.soton.ac.uk
Fri Apr 8 15:06:04 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

This is possible. Here is a patch for Message.pm to clean up the output:
-----SNIP-----
--- Message.pm.old 2005-04-08 14:33:30.000000000 +0100
+++ Message.pm  2005-04-08 15:03:20.940680796 +0100
@@ -3872,12 +3872,18 @@
   my $from = $this->{from};
   #my $to   = join(', ', @{$this->{to}});
   my $subj = $this->{subject};
+  my $ip   = $this->{clientip};
   my $rept = join("    $reportword: ", @everyrept);
+  #print STDERR "Rept is\n$rept\n";
+
+  # Build list of unique archive and quarantine storage locations
   my @quarantines = grep /\//, @{$this->{archiveplaces}};
   push @quarantines, grep /\//, @{$this->{quarantineplaces}};
-  my $quarantine = join(", ", @quarantines);
-  my $ip   = $this->{clientip};
-  #print STDERR "Rept is\n$rept\n";
+  my($quarantine, %quarantinelist);
+  foreach $quarantine (@quarantines) {
+    $quarantinelist{$quarantine} = 1;
+  }
+  $quarantine = join(', ', sort keys %quarantinelist);

   # Build unique list of recipients. Avoids Postfix problem which has
   # separate lists of real recipients and original recipients.
-----SNIP-----

Please give this a try and let me know how you get on.

Jeff A. Earickson wrote:

> Julian,
>
> MS 4.40.11, Solaris 9.  I found this in my daily report of quarantined
> stuff.  The push @quarantines in CreatePostmasterNotice() seems to have
> run amok here.  Any idea why it would push the same string so many times?
>
> j37L9Nr5007705: 137.146.156.144 (xxx at colby.edu)
> quarantine: /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
> /var/spool/MailScanne!
> MailScanner: Executable DOS/Windows programs are dangerous in email
> (SETUP.EXE)
>
> Jeff Earickson
> Colby College
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!


--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list