quarantine password-protected files

[Scott Silva]

James D. Parra spake the following on 8/9/2006 10:21 AM:
> Hello,
> 
> I want to quarantine password-protected file attachments, actually, any file
> attachments that MailScanner determines as suspicious. After looking through
> mailscanner.conf I found;
> 
> <snip>
> # Reports and Responses
> # ---------------------
> #
> 
> # Do you want to store copies of the infected attachments and messages?
> # This can also be the filename of a ruleset.
> Quarantine Infections = yes
> <snip>
> 
> However, an attachment was deleted and not stored in
> /var/spool/MailScanner/quaratine/, according the text message;
> 
> This is a message from MailScanner E-Mail Virus Protection Service
> ----------------------------------------------------------------------
> The original e-mail message contained potentially dangerous content,
> which has been removed for your safety.
> 
> The content is dangerous as it is often used to spread viruses or to gain
> personal or confidential information from you, such as passwords or credit
> card numbers.
> 
> Due to limitations placed on us by the Regulation of Investigatory Powers
> Act 2000, we were unable to keep a copy of the original attachment.
> 
> The content filters found this:
>    MailScanner: Message contained password-protected archive
> ~~~
> 
> Where in the conf can I fix this?
I have been just storing all messages for a short period of time. Then you can
release anything you need to, and you can set up the system to kill after a
set number of days. Mailwatch makes this even easier.

-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!