Thats a GREAT idea. Perhaps you could parse the virus name into the email as well. We did this with our previous AV system, and it worked very well for us. Unfortunately, a script-based solution is much slower, and demands to much overhead for the volume of mails being scanned.
Tony ----- Original Message ----- From: "Jason Badry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 12, 2004 12:54 PM Subject: [xmail] Filters - XAV / Message Modification > I've decided that I am going to pass on the header and a message (with > modified subject line) to virus recipients saying that a virus was > intercepted. This way if there is a false positive they can let me know > and I can go and check the keep folder for them. It is also nice to > 'advertise' that you did intercept the virus for them aka job security. > > My plan is to do further modifications to XAV to this end, but I do not > know much about the structure of the email files. What is the format of > the file / is the first blank line basically the end of the header? Are > there any other formatting rules to follow? > > Thanks, > > ... Jason Badry > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
