<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1170" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=669433016-01092003><FONT face=Arial size=2>We upgraded to from
4.20-3 to 4.24.11 today.</FONT></SPAN></DIV>
<DIV><SPAN class=669433016-01092003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=669433016-01092003><FONT face=Arial size=2>The following mail
was picked up as having dangerous content:</FONT></SPAN></DIV>
<DIV><SPAN class=669433016-01092003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=669433016-01092003><FONT face=Arial size=2>Sep 1
17:10:27 MailScanner[18581]: Content Checks: Detected HTML-specific
exploits in h81GANmM026123<BR>Sep 1 17:10:27 MailScanner[18581]:
Saved infected "msg-18581-834.html" to
/var/spool/MailScanner/quarantine/20030901/h81GANmM026123<BR></FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2><SPAN class=669433016-01092003>The file that was
quarantined was not the original message but the in fact the
stored.content.message.txt</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=669433016-01092003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=669433016-01092003>We have Quarantine
Infections = yes & Quarantine Whole Message = no set in the MailScanner.conf
file.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=669433016-01092003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=669433016-01092003>Is this the
behaviour we should expect?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=669433016-01092003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=669433016-01092003>Is it possible to
have it so that dangerous content is quarantined & infected attachments
without having to quartine the entire message?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<P><FONT face=Arial size=2>Phil Kendall</FONT> <BR><FONT face=Arial
size=2>Technical Systems Administrator</FONT> <BR><FONT face=Arial size=2>TCP -
Europacom.net</FONT> </P>
<DIV> </DIV></BODY></HTML>