Stopping content report if virus found?

[Paul Hutchings]

Not sure if I'm going to do a good job of explaining this but here goes.

 

Our MailScanner is configured to check for viruses using ClamAV and to
check filenames/types using the default conf files that come with
MailScanner.

 

Let's say I email myself the eicar.com test file from outside the
network.

 

It's a file that would be blocked as it's a virus, and also because it's
an executable.

 

As a sender I don't receive a "message blocked" report which is what I
want as it's a virus.

 

As a recipient I do receive a "someone sent you a virus" report, though
is also gives me the MailScanner report output about the file type:

 

At Sun Jun 10 18:33:52 2007 the scanner said:

   ClamAV: eicar.com contains Eicar-Test-Signature 

   MailScanner: Executable DOS/Windows programs are dangerous in email
(eicar.com)

 

It's only a small thing, but is there any way around this? i.e. if it's
a virus don't bother to check any further as it's a virus and I want to
delete it?

 

TIA,

Paul

 

Paul Hutchings

Network Administrator, MIRA Ltd.

Tel: 44 (0)24 7635 5378

Fax: 44 (0)24 7635 8378

mailto:paul.hutchings at mira.co.uk

 


-- 
MIRA Ltd.

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England.

Registered in England No. 402570
VAT Registration  GB 114 5409 96

The contents of this e-mail are confidential and are solely for the use of the intended recipient.
If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax.
You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20070610/8bc7ea1d/attachment.html