A few of you have complained/noted that you didn't like that Q-S gave out
file and dir details as shown at the bottom of this message.

There are (as usual) several ways to deal with this, but I want to hear what
people think of this one:

I intend to now send (up to) three separate alerts: one each to the sender,
recips and admin addresses. Currently Q-S sends one message to the sender
with the admin address Cc'ed. By sending three messages, I can easily change
Q-S so that the file/dir details component isn't included in the messages to
sender/recips - but it is in the message to the admin.

I don't like the other option of hashing/removing the path details, as
(e.g.) here we have MORE THAN ONE Q-S SERVER - so how is anyone meant to
figure out what server the darn message is on if it's been hashed out. By
ensuring the admin gets an unadulterated message, they're happy, and the
sender/recips don't care as they are still told they have the "XXX" virus -
which is enough information to react to (i.e. install/update virus scanner :-)


Any complaints to that idea?


The message text in question follows:

========================================================
The original message is kept in:

  crom.trimble.co.nz:/var/spool/qmailscan/quarantine
  
  where the System Anti-Virus Administrator can further diagnose it.
  
  The Email scanner reported the following when it scanned that message:
  
  ---
  
  ---trophie results ---
  FILE/DIR INFECTED :
/var/spool/qmailscan/crom.trimble.co.nz102566949242220301
VIRUS FOUND       : JS_KAKWORM.A

=========================================================


---

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
No, I will not fix your computer.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to