SPAMVIRUS Feature Question

[Jonas A. Larsen]

I can only second the wish for a way to have the sigs that hit turn up in
our stats/mailwatch something that lets us monitor the effectiveness of it.

However since I was an early adopter of the new feature im not sure how it
would work.

You could do it today by writing a ton of sa rules (1 for each signature)
but that would be a mess.

An ugly hack fix would be to parse the log files (where message id and sig
name is parseable, and then make a script that inserted the sig name intro
the corresponding row in the mailwatch db. But as I said, that would be
really ugly :)

I'd love to hear other people's take on this, not to mention Julians :)

Best regards

Jonas A. Larsen

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Chris Barber
> Sent: 20. oktober 2009 19:09
> To: MailScanner discussion
> Subject: SPAMVIRUS Feature Question
> 
> Hi All,
> 
> Running the latest MailScanner version. Is it possible to have
> MailScanner put the name of the signature that hit the spamvirus
> feature
> in the MailWatch detail pane?
> 
> I see it show the SA score with the term "MS_FOUND_SPAMVIRUS", but it
> does not show what signature was hit. Previously the virus scanner
> would
> show this in the virus section. But now that MailScanner is heading
> these off, I don't have a way of knowing which signature was hit.
> 
> Thanks,
> Chris
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!