RE: [suse-security] Re: InterScan eManager Content Management Notification!
(Q: is it possible to configure Amavis to send info about the virus detected to the recipient person? Currently it only tells that a "virus have been found" and includes original mail's headers but it doesn't tell which virus was found; this last info is sent only to the postmaster or virusalert's mail address you have defined but not to the recipient or sender address).
You probably can. Check the file scanmails (/usr/sbin/scanmails) In the section: ################### send a mail back to sender ###################### the email which is going to the sender is defined. Now you say that the postmaster gets the information. Just copy that part of his email into the above mentioned part and it should work. Or did I misunderstand you? Raffy
On Mon, 26 Feb 2001, Raffy wrote:
(Q: is it possible to configure Amavis to send info about the virus detected to the recipient person? Currently it only tells that a "virus have been found" and includes original mail's headers but it doesn't tell which virus was found; this last info is sent only to the postmaster or virusalert's mail address you have defined but not to the recipient or sender address).
You probably can. Check the file scanmails (/usr/sbin/scanmails)
In the section:
################### send a mail back to sender ######################
the email which is going to the sender is defined. Now you say that the postmaster gets the information. Just copy that part of his email into the above mentioned part and it should work. Or did I misunderstand you?
Yes, you can. A small snippet for parsing NAI uvscan's output was posted to our amavis-user ML some time ago. May I suggest to discuss such stuff in this mailing list (see www.amavis.org for subscription details). And, btw, the amavis 0.2.x source tree is more or less dead (as neither Lars, Geoff nor I work on it). Maintaing three branches (amavis 0.2.x, amvis-perl, amavisd) is not possible for us ... best regards, Rainer Link -- Rainer Link | SuSE - The Linux Experts link@suse.de | Developer of A Mail Virus Scanner (amavis.org) www.suse.de | Founder OpenAntiVirus Project (www.openantivirus.org)
On Mon, 26 Feb 2001 16:13:56 +0100, you wrote:
(Q: is it possible to configure Amavis to send info about the virus detected to the recipient person? Currently it only tells that a "virus have been found" and includes original mail's headers but it doesn't tell which virus was found; this last info is sent only to the postmaster or virusalert's mail address you have defined but not to the recipient or sender address).
You probably can. Check the file scanmails (/usr/sbin/scanmails)
Ok. I've hacked a bit this shell-script and I have it now :-) Really simple task. Basically I've added: virusinfo=`grep "Found virus" ${tmpdir}/${logfile}` (it gets the vital information from av output) And then I've included the following lines at section feeding sendmail: Virus related info: ${virusinfo} This works with Trend Micro FileScanner (I'm using the one which comes with Viruswall package ;-)). For other av's you'll have to modify by yourself. A example virus report with my "patch": ====== V I R U S A L E R T Our viruschecker found a VIRUS in a mail from "roman@madrid.com" to you. Delivery of the email was stopped! Virus related info: *** Found virus Eicar_test_file in file /var/tmp/scanmails28662/unpacked/983203995.28683-0.emilio Please contact your system administrator for details ====== I think recipient & sender should always know about the virus which is actually disturbing them :-) =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ** RoMaN SoFt / LLFB ** roman@madrid.com http://pagina.de/romansoft ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
On Mon, 26 Feb 2001 17:33:27 +0100, you wrote:
Ok. I've hacked a bit this shell-script and I have it now :-) Really simple task.
Perhaps it may be useful to someone... emilio:/usr/sbin # diff scanmails scanmails.ORIG 1283,1284d1282 < virusinfo=`grep "Found virus" ${tmpdir}/${logfile}` < 1303,1308d1300 < Virus related info: < < ${virusinfo} < < < 1324,1325d1315 < virusinfo=`grep "Found virus" ${tmpdir}/${logfile}` < 1338,1343c1328 < < Virus related info: < < ${virusinfo} < < ---
emilio:/usr/sbin # =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ** RoMaN SoFt / LLFB ** roman@madrid.com http://pagina.de/romansoft ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
participants (3)
-
Raffy -
Rainer Link -
RoMaN SoFt / LLFB!!