quarantine report running amok

Julian Field MailScanner at ecs.soton.ac.uk
Fri Apr 8 16:53:01 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Did the patch work? I'm off very soon and won't be back online much till
tomorrow.

Julian Field wrote:

> This is possible. Here is a patch for Message.pm to clean up the output:
> -----SNIP-----
> --- Message.pm.old 2005-04-08 14:33:30.000000000 +0100
> +++ Message.pm  2005-04-08 15:03:20.940680796 +0100
> @@ -3872,12 +3872,18 @@
>   my $from = $this->{from};
>   #my $to   = join(', ', @{$this->{to}});
>   my $subj = $this->{subject};
> +  my $ip   = $this->{clientip};
>   my $rept = join("    $reportword: ", @everyrept);
> +  #print STDERR "Rept is\n$rept\n";
> +
> +  # Build list of unique archive and quarantine storage locations
>   my @quarantines = grep /\//, @{$this->{archiveplaces}};
>   push @quarantines, grep /\//, @{$this->{quarantineplaces}};
> -  my $quarantine = join(", ", @quarantines);
> -  my $ip   = $this->{clientip};
> -  #print STDERR "Rept is\n$rept\n";
> +  my($quarantine, %quarantinelist);
> +  foreach $quarantine (@quarantines) {
> +    $quarantinelist{$quarantine} = 1;
> +  }
> +  $quarantine = join(', ', sort keys %quarantinelist);
>
>   # Build unique list of recipients. Avoids Postfix problem which has
>   # separate lists of real recipients and original recipients.
> -----SNIP-----
>
> Please give this a try and let me know how you get on.
>
> Jeff A. Earickson wrote:
>
>> Julian,
>>
>> MS 4.40.11, Solaris 9.  I found this in my daily report of quarantined
>> stuff.  The push @quarantines in CreatePostmasterNotice() seems to have
>> run amok here.  Any idea why it would push the same string so many
>> times?
>>
>> j37L9Nr5007705: 137.146.156.144 (xxx at colby.edu)
>> quarantine: /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705,
>> /var/spool/MailScanne!
>> MailScanner: Executable DOS/Windows programs are dangerous in email
>> (SETUP.EXE)
>>
>> Jeff Earickson
>> Colby College
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>
>
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
> Buy the MailScanner book at www.MailScanner.info/store
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list