routing "Bad Filename" info to users
Jeff A. Earickson
jaearick at colby.edu
Tue Sep 11 17:11:44 IST 2007
Gang,
I have MailScanner set up to send the "virus detected" and
"bad filename" or filetype messages to "msvirii" which is an
email alias for me.
What I need are the "bad filename" blurbs like below to go to
end user (kjmartis here), but have the "virus detected" messages
not go to end users. How to do this?
Jeff Earickson
Colby College
---------- Forwarded message ----------
Date: Tue, 11 Sep 2007 12:00:06 -0400 (EDT)
From: MailScanner <postmaster at colby.edu>
To: msvirii at colby.edu
Subject: Bad Filename Detected
The following e-mails were found to have: Bad Filename Detected
Sender: ccyr at denford.com
IP Address: 66.219.128.242
Recipient: kjmartis at colby.edu
Subject: FW: Licence file COL31-01F (REGENERATION) Colby College
MessageID: l8BFwapx018741
Quarantine: /var/spool/MailScanner/quarantine/20070911/l8BFwapx018741
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (lmtools.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (delcam.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (spnsrv9x.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (lmtools.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (delcam.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (spnsrv9x.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (loadserv.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (lmutil.exe)
MailScanner: Batch files are often malicious (lmstart.bat)
MailScanner: Executable DOS/Windows programs are dangerous in email (SPNSrvStop.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (SetupSysDriver.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (PwdGenUtility1.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (PwdGenUtility.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (sentstrt.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (spnsrvnt.exe)
MailScanner: Executable DOS/Windows programs are dangerous in email (lmgrd.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (loadserv.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (lmutil.exe)
Report: MailScanner: Batch files are often malicious (lmstart.bat)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (SPNSrvStop.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (SetupSysDriver.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (PwdGenUtility1.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (PwdGenUtility.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (sentstrt.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (spnsrvnt.exe)
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (lmgrd.exe)
Full headers are:
Return-Path: <g>
Received: from hume.neobright.net (hume.neobright.net [66.219.128.242])
by jasper.colby.edu (8.14.1/8.14.1) with ESMTP id l8BFwapx018741
for <kjmartis at colby.edu>; Tue, 11 Sep 2007 11:58:44 -0400 (EDT)
Received: from CARLENE (dynamic-acs-72-23-120-203.zoominternet.net [72.23.120.203])
by hume.neobright.net (8.11.6/8.11.6) with ESMTP id l8BFO5w27968
for <kjmartis at colby.edu>; Tue, 11 Sep 2007 11:24:05 -0400
From: "Carlene Cyr" <ccyr at denford.com>
To: <kjmartis at colby.edu>
Subject: FW: Licence file COL31-01F (REGENERATION) Colby College
Date: Tue, 11 Sep 2007 11:23:56 -0400
Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAIeSYTo+NZEi0yM0zVy0vtsKAAAAQAAAAoqro5kWYWEC5Yul4h93JPwEAAAAA at denford.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0000_01C7F466.4122F500"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
Disposition-Notification-To: "Carlene Cyr" <ccyr at denford.com>
X-Greylist: Delayed for 00:31:28 by milter-greylist-4.0b1 (jasper.colby.edu [137.146.28.72]); Tue, 11 Sep 2007 11:58:54 -0400 (EDT)
--
MailScanner
Email Virus Scanner
www.mailscanner.info
More information about the MailScanner
mailing list