MailScanner question

James D. Parra Jamesp at MusicReports.com
Wed Aug 9 18:25:12 UTC 2006


Hello,

I have asked this question on the MailScanner list, but I haven't gotten a
reply. I know it must be a simple solution, yet, for the life of me, I can't
find the answer.

I want to quarantine password-protected file attachments, actually, any file
attachments that MailScanner determines as suspicious. Currently, the
attachments are being deleted and not quarantined <not good>. After looking
through
mailscanner.conf I found;

<snip>
# Reports and Responses
# ---------------------
#

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = yes
<snip>

However, an attachment was deleted and not stored in
/var/spool/MailScanner/quaratine/, according the text message;

This is a message from MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail message contained potentially dangerous content,
which has been removed for your safety.

The content is dangerous as it is often used to spread viruses or to gain
personal or confidential information from you, such as passwords or credit
card numbers.

Due to limitations placed on us by the Regulation of Investigatory Powers
Act 2000, we were unable to keep a copy of the original attachment.

The content filters found this:
   MailScanner: Message contained password-protected archive
~~~

Where in the conf can I fix this?

Many thanks in advance.


James 




More information about the redhat-list mailing list