quarantine password-protected files

Scott Silva ssilva at sgvwater.com
Wed Aug 9 19:22:59 IST 2006

James D. Parra spake the following on 8/9/2006 10:21 AM:
> Hello,
> I want to quarantine password-protected file attachments, actually, any file
> attachments that MailScanner determines as suspicious. After looking through
> mailscanner.conf I found;
> <snip>
> # Reports and Responses
> # ---------------------
> #
> # Do you want to store copies of the infected attachments and messages?
> # This can also be the filename of a ruleset.
> Quarantine Infections = yes
> <snip>
> However, an attachment was deleted and not stored in
> /var/spool/MailScanner/quaratine/, according the text message;
> This is a message from MailScanner E-Mail Virus Protection Service
> ----------------------------------------------------------------------
> The original e-mail message contained potentially dangerous content,
> which has been removed for your safety.
> The content is dangerous as it is often used to spread viruses or to gain
> personal or confidential information from you, such as passwords or credit
> card numbers.
> Due to limitations placed on us by the Regulation of Investigatory Powers
> Act 2000, we were unable to keep a copy of the original attachment.
> The content filters found this:
>    MailScanner: Message contained password-protected archive
> ~~~
> Where in the conf can I fix this?
I have been just storing all messages for a short period of time. Then you can
release anything you need to, and you can set up the system to kill after a
set number of days. Mailwatch makes this even easier.


MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

More information about the MailScanner mailing list