Attachment replaced, but no Inline Warning
Markus Wennrich
mwen at f-i-ts.net
Tue Jun 26 11:07:21 IST 2012
Yes, I have:
Inline HTML Warning = %report-dir%/inline.warning.html
Inline Text Warning = %report-dir%/inline.warning.txt
Mark Infected Messages = yes
And it usually works fine ... just this mail got through without inline
warning. I guess the module, which usually inserts the warning text,
couldn't correctly parse the mime-structure or something like that.
Markus
On 25.06.2012 16:08, Sampson, Aaron wrote:
> Have you double checked your MailScanner.conf file? I believe that there is an option that you can change to fix that. I will try to pull up ours and see what the option is and attach it in another e-mail.
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Markus Wennrich
> Sent: Monday, June 25, 2012 8:29 AM
> To: mailscanner at lists.mailscanner.info
> Subject: Attachment replaced, but no Inline Warning
>
> Hi,
>
> I have a mail with a trojan, which is received and processed by mailscanner.
> The virus is found by clamscan, the attachment is replaced by Attachment-Warning.txt, etc ... everything looks fine, with one exception:
>
> No "Inline Warning" text at the top of the mail.
>
> In every other mail (html or non-html) processed by our MailScanner (file type, file name, virus) a "Inline Warning" is added ... except for this mail.
>
> I've attached the mail (message.txt), version-output, the processed mail
> (out.txt) and the maillog as encrypted zip (password: mailscanner), cause I fear, nobody will read this mail, if it contains a plain virus ;-)
>
> Has anybody a idea, why mailscanner can't add a Inline Warning to this email?
>
> Thanks in advance,
>
> Markus
>
>
>
More information about the MailScanner
mailing list