What are infections exactly?

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



On 02/06/2009 16:29, Jose Perez wrote:
> Hi people:
>
> I was wondering what's the meaning of Infections from the point of
> view of MailScanner? According to all my infected messages I can see
> that MailScanner mark them as infection:
>
> - Messages infected with viruses
> - Messages containing Dangerous Content
>
> I'm using sanesecurity database with ClamAV to detect spam 'cause
> their results are good! But I'm tired to see MailScanner sending a
> "Virus Detected" message every time ClamAV matches a spam message with
> the sanesecurity signature.
>
> Is there a way to disable this notices to postmaster when ClamAV
> detects only some kind of virus report? I'd like MailScanner to send
> notices only when detect real viruses (no spam from sanesecurity) or
> Dangerous Content.
>
> According to "Send Notices" directive it's possible to write a ruleset
> but I'm not pretty sure what the syntax should be... maybe just
> something like this?
>
> From: user at domain Yes
> To: user at domain2 No
>
> I'd like to know if it is possible to write a ruleset based on the
> virus message report so I can filter sanesecurity matches.
>    
Look for "Virus" in /etc/MailScanner/rules/* for starters.
> I hope someone can help me, thanks
>    

Jules

- -- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Follow me at twitter.com/JulesFM

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.10.0 (Build 500)
Comment: Use PGP or Thunderbird Enigmail to verify this message
Charset: ISO-8859-1

wj8DBQFKJWbzEfZZRxQVtlQRAgaIAKDb7HJAO4aKPBk+vdwdF5OKBZeNowCgwiUu
oTuplESbZ2C6Aunw+sLMVqI=
=cYn4
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.