quarantine password-protected files

James D. Parra Jamesp at MusicReports.com
Wed Aug 9 18:21:28 IST 2006


Hello,

I want to quarantine password-protected file attachments, actually, any file
attachments that MailScanner determines as suspicious. After looking through
mailscanner.conf I found;

<snip>
# Reports and Responses
# ---------------------
#

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = yes
<snip>

However, an attachment was deleted and not stored in
/var/spool/MailScanner/quaratine/, according the text message;

This is a message from MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail message contained potentially dangerous content,
which has been removed for your safety.

The content is dangerous as it is often used to spread viruses or to gain
personal or confidential information from you, such as passwords or credit
card numbers.

Due to limitations placed on us by the Regulation of Investigatory Powers
Act 2000, we were unable to keep a copy of the original attachment.

The content filters found this:
   MailScanner: Message contained password-protected archive
~~~

Where in the conf can I fix this?


Hello,

Still poking around in the MailScanner.conf and I can't find where to fix
this. Can someone point me to a direct link in the wiki or in the
documentation.

Thank you in advance,

~James


More information about the MailScanner mailing list