routing "Bad Filename" info to users

Jeff A. Earickson jaearick at colby.edu
Tue Sep 11 17:11:44 IST 2007


Gang,

I have MailScanner set up to send the "virus detected" and
"bad filename" or filetype messages to "msvirii" which is an
email alias for me.

What I need are the "bad filename" blurbs like below to go to
end user (kjmartis here), but have the "virus detected" messages
not go to end users.  How to do this?

Jeff Earickson
Colby College
---------- Forwarded message ----------
Date: Tue, 11 Sep 2007 12:00:06 -0400 (EDT)
From: MailScanner <postmaster at colby.edu>
To: msvirii at colby.edu
Subject: Bad Filename Detected

The following e-mails were found to have: Bad Filename Detected

     Sender: ccyr at denford.com
IP Address: 66.219.128.242
  Recipient: kjmartis at colby.edu
    Subject: FW: Licence file COL31-01F (REGENERATION) Colby College
  MessageID: l8BFwapx018741
Quarantine: /var/spool/MailScanner/quarantine/20070911/l8BFwapx018741
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (lmtools.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (delcam.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (spnsrv9x.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (lmtools.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (delcam.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (spnsrv9x.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (loadserv.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (lmutil.exe)
             MailScanner: Batch files are often malicious (lmstart.bat)
             MailScanner: Executable DOS/Windows programs are dangerous in email (SPNSrvStop.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (SetupSysDriver.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (PwdGenUtility1.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (PwdGenUtility.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (sentstrt.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (spnsrvnt.exe)
             MailScanner: Executable DOS/Windows programs are dangerous in email (lmgrd.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (loadserv.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (lmutil.exe)
     Report: MailScanner: Batch files are often malicious (lmstart.bat)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (SPNSrvStop.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (SetupSysDriver.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (PwdGenUtility1.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (PwdGenUtility.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (sentstrt.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (spnsrvnt.exe)
     Report: MailScanner: Executable DOS/Windows programs are dangerous in email (lmgrd.exe)

Full headers are:

  Return-Path: <g>
  Received: from hume.neobright.net (hume.neobright.net [66.219.128.242])
  	by jasper.colby.edu (8.14.1/8.14.1) with ESMTP id l8BFwapx018741
  	for <kjmartis at colby.edu>; Tue, 11 Sep 2007 11:58:44 -0400 (EDT)
  Received: from CARLENE (dynamic-acs-72-23-120-203.zoominternet.net [72.23.120.203])
  	by hume.neobright.net (8.11.6/8.11.6) with ESMTP id l8BFO5w27968
  	for <kjmartis at colby.edu>; Tue, 11 Sep 2007 11:24:05 -0400
  From: "Carlene Cyr" <ccyr at denford.com>
  To: <kjmartis at colby.edu>
  Subject: FW: Licence file COL31-01F (REGENERATION) Colby College
  Date: Tue, 11 Sep 2007 11:23:56 -0400
  Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAIeSYTo+NZEi0yM0zVy0vtsKAAAAQAAAAoqro5kWYWEC5Yul4h93JPwEAAAAA at denford.com>
  MIME-Version: 1.0
  Content-Type: multipart/mixed;
  	boundary="----=_NextPart_000_0000_01C7F466.4122F500"
  X-Priority: 3 (Normal)
  X-MSMail-Priority: Normal
  X-Mailer: Microsoft Outlook, Build 10.0.2627
  Importance: Normal
  X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
  Disposition-Notification-To: "Carlene Cyr" <ccyr at denford.com>
  X-Greylist: Delayed for 00:31:28 by milter-greylist-4.0b1 (jasper.colby.edu [137.146.28.72]); Tue, 11 Sep 2007 11:58:54 -0400 (EDT)


-- 
MailScanner
Email Virus Scanner
www.mailscanner.info


More information about the MailScanner mailing list