How to browse infected messages in quarantine?

Scott Silva ssilva at sgvwater.com
Thu Feb 19 19:54:32 GMT 2009


on 2-19-2009 11:42 AM Jason Voorhees spake the following:
> On Thu, Feb 19, 2009 at 2:34 PM, Scott Silva <ssilva at sgvwater.com> wrote:
>> on 2-19-2009 11:18 AM Steve Freegard spake the following:
>>> Hi Jason,
>>>
>>> Jason Voorhees wrote:
>>>> Hi people:
>>>>
>>>> I'm sure this is a pretty easy question but I'm still unable to find
>>>> the appropiate directive(s) to achieve it. I quarantine all spam
>>>> messages and I can browse them later using MailWatch.
>>>> But when MailScanner founds a Virus in a message using ClamAV, I can
>>>> see that is sent to quarantine too, I see it in the list of
>>>> quarantined messages trough MailWatch but I can't see it's content nor
>>>> release the infected message.
>>>>
>>>> What should I change in my configuration to be able to browse and
>>>> release infected messages in quarantine?
>>> You can't do anything through MailWatch if the message is marked as
>>> Virus infected; I considered that a security feature when I wrote it.
>>>
>>> You'll have to release it the old-fashioned way 'sendmail -i -f [sender]
>>> [recipient] < /path/to/quarantine/message'.
>>>
>>> Regards,
>>> Steve.
>> Or hack MailWatch if you feel bold.
>> In detail.php look for;
>>
>>   // Don't allow message to be released if it is marked as 'dangerous'
>>   // Currently this only applies to messages that contain viruses.
>>   if($item['dangerous'] !== "Y") {
>>
>> And change to;
>>  if($item['dangerous'] !== "r") {
>>
> Thanks, and I also changed the code to view the infected message.
> 
> I only wanted to know if was MailScanner who prevented me to
> browse/release infected message. Now I know that Mailwatch was the
> responsible for this.

Mailscanner will also interfere with this unless it is "tweaked". Otherwise it
will re-detect the virus and re-quarantine it.
> 
> Thanks again
>> I don't remember why the "r", but it can't be "Y" for sure.
>>
>>
>> Remember!!! If you break it, you get to keep the pieces.
>>  Make a copy of anything you change.
>>
>> --
>> MailScanner is like deodorant...
>> You hope everybody uses it, and
>> you notice quickly if they don't!!!!
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>


-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090219/ecb61a31/signature.bin


More information about the MailScanner mailing list