On Wed, 28 Jan 2004, Dean Mumby wrote:
> Can I simply add ,'Worm.SCO.A' to the qmail-scanner.pl file
Yes. You need to add it to the silent_viruses_array, like this:
my
@silent_viruses_array=('klez','bugbear','hybris','yaha','braid','nimda','tanatos','sobig','winevar','palyh','fizzer','gibe','cailont','lovelorn','swen','dumaru','sober','hawaii','holar-i','bagle'
,'worm.sco.a');
> and restart qmail
No need to restart qmail. Qmail-scanner is executed by your smtpd before
the message gets into qmail's queue. This will stop warnings being sent to
the sender, for any future email that comes in containing the virus.
I suppose you should be very careful about editing a script that could
be executed at anytime, in case it's executed during rewriting, when empty
or only partically written e.g.
$ cp -p /var/qmail/bin/qmail-scanner-queue.pl /var/qmail/bin/qmail-scanner-queue.pl.tmp
$ vi /var/qmail/bin/qmail-scanner-queue.pl.tmp
$ mv /var/qmail/bin/qmail-scanner-queue.pl.tmp /var/qmail/bin/qmail-scanner-queue.pl
Make sure these steps preserve the setuid bit on that file. They do for me
on FreeBSD 4.9-STABLE at least.
> to implement this I have recied over 1000 warnings in the last day
It won't stop the warnings you receive per se, but just the warnings
sent to the sender by qmail-scanner.
Cheers.
--
Mark Powell - UNIX System Administrator - The University of Salford
Information Services Division, Clifford Whitworth Building,
Salford University, Manchester, M5 4WT, UK.
Tel: +44 161 295 4837 Fax: +44 161 295 5888 www.pgp.com for PGP key
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
