Hi Gabe, I am not sure the script is clean enough to post to the list, (It seems like this is one of those tools that only gets worked on in a crises) but I would be happy to share to you directly or to anyone who asks.
Enjoy, John On 3/4/2015 6:20 AM, Forster, Gabriel wrote: > John, > > That script would likely be very helpful to many. Can it be put up on github, > posted to the list or similar? Otherwise, I would sure appreciate it myself. > > Thanks, > Gabe > > ________________________________________ > From: info-cyrus-bounces+gabriel.forster=searshc....@lists.andrew.cmu.edu > [info-cyrus-bounces+gabriel.forster=searshc....@lists.andrew.cmu.edu] on > behalf of Sebastian Hagedorn [haged...@uni-koeln.de] > Sent: Wednesday, March 04, 2015 7:06 AM > To: John Wade > Cc: info-cyrus@lists.andrew.cmu.edu > Subject: Re: deleting emails directly > > --On 4. März 2015 05:33:44 -0600 John Wade<jw...@oakton.edu> wrote: > >> The tool we wrote for phishing scans the Cyrus imap server's imap spool >> file systems looking for a specific text string in specific user's >> mailboxes in recent messages. Te search can be done either recursively >> or just the inbox. It then looks for and replaces another specific >> text string (usually the phishing URL) with a string, like "Phishing URL >> removed by the Information Technology department". > Strictly speaking you would have to change the message's UID or the > mailbox's UIDVALIDITY as well. Messages are guaranteed to be immutable by > RFC 3501, section 2.3.1.1. > -- > .:.Sebastian Hagedorn - Weyertal 121 (Gebäude 133), Zimmer 2.02.:. > .:.Regionales Rechenzentrum (RRZK).:. > .:.Universität zu Köln / Cologne University - ✆ +49-221-470-89578.:. > > This message, including any attachments, is the property of Sears Holdings > Corporation and/or one of its subsidiaries. It is confidential and may > contain proprietary or legally privileged information. If you are not the > intended recipient, please delete it without reading the contents. Thank you. ---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus