Realeasing from quarantine

Steen, Glenn Glenn.Steen at AP1.SE
Wed Mar 9 12:56:28 GMT 2005


    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Jens W. Skov 
> - JS Consult
> Sent: den 9 mars 2005 11:12
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: SV: Realeasing from quarantine
> 
> 
> I should add that I'm on postfix :-)
Look at
http://article.gmane.org/gmane.mail.virus.mailscanner/23097
For the woes of releasing postfix queue files;).

As you mention that you use MailWatch, let me remind you that you
should _not_ be quarantining queue files, as per the MW install
instructions.
Both the quarantine relase and sa-learn features (and viewing of
"non-dangerous" quarantine entries) rely on them being "decoded"
to an rfc822 test format. Besides, the envelope info (in the
queue file) is already stored in the MW database, so... You
really don't need them as queue files...
Amend your MailScanner.conf file with
 Quarantine Whole Message = yes
 Quarantine Whole Message As Queue Files = no

-- Glenn

> 
> mvh. 
> 
> Jens W. Skov - JS Consult
> Rævehøjparken 58
> 2800 Kgs. Lyngby
> jens at jsconsult.dk - http://www.jsconsult.dk
> Telefon: +45 45884077
> Mobil : +45 23254077
> 
> 
>  
> 
>  
> 
> > -----Oprindelig meddelelse-----
> > Fra: MailScanner mailing list 
> > [mailto:MAILSCANNER at JISCMAIL.AC.UK] På vegne af Martin Hepworth
> > Sendt: 9. marts 2005 11:06
> > Til: MAILSCANNER at JISCMAIL.AC.UK
> > Emne: Re: Realeasing from quarantine
> > 
> > Jens
> > 
> > ok looks like you have the queue files in the quarantine, not 
> > message files.
> > 
> > In that case just copy the queue files (both are needed for 
> > the message)
> >   into the outgoing queue and sendmail should deliver them for you.
> > 
> > --
> > Martin Hepworth
> > Snr Systems Administrator
> > Solid State Logic
> > Tel: +44 (0)1865 842300
> > 
> > 
> > Jens W. Skov - JS Consult wrote:
> > > Hi
> > >
> > > I'm using mailscanner with mailwatch, and when I try yo 
> > release a file 
> > > fom quarantine I get at mail marked with {Filename?} and with the 
> > > attached files replaced with warning. The message itself 
> > seems to be 
> > > attached as a queue file.
> > >
> > > In the quarantine I have a folder with the message and the 
> > attached files.
> > >
> > > I also archive to queue files. When I try to do a sendmail -toi 
> > > <archived file I just recieve a queue file in plaintext 
> in the mail 
> > > body from the root user on the mailscanner server.
> > >
> > > Can someone help me find out what I'm doing wrong?
> > >
> > >
> > > Jens
> > > ------------------------ MailScanner list 
> > ------------------------ To 
> > > unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> > > 'leave mailscanner' in the body of the email.
> > > Before posting, read the MAQ 
> > (http://www.mailscanner.biz/maq/) and the 
> > > archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > >
> > > *Support MailScanner development - buy the book off the website!*
> > 
> > 
> **********************************************************************
> > 
> > This email and any files transmitted with it are confidential 
> > and intended solely for the use of the individual or entity 
> > to whom they are addressed. If you have received this email 
> > in error please notify the system manager.
> > 
> > This footnote confirms that this email message has been swept 
> > for the presence of computer viruses and is believed to be clean.
> > 
> > 
> **********************************************************************
> > 
> > ------------------------ MailScanner list 
> > ------------------------ To unsubscribe, email 
> > jiscmail at jiscmail.ac.uk with the words:
> > 'leave mailscanner' in the body of the email.
> > Before posting, read the MAQ 
> > (http://www.mailscanner.biz/maq/) and the archives 
> > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > 
> > Support MailScanner development - buy the book off the website!
> > 
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list