> -----Original Message-----
> From: Jesse Guardiani [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, September 03, 2003 10:04 AM
> To: [EMAIL PROTECTED]
> Subject: [Qmail-scanner-general]SoBig.F silent
>
>
> Howdy list,
>
> I have "sobig" in my list of --silent-viruses.
> And I am (appropriately) still getting emails
> to the email alert address.
>
> How can I confirm that this virus is indeed
> being treated as silent? Grep for the sender
> address in my maillog? (nothing there)
>
set $DEBUG=1 and watch.... it will not send alert to sender if you have
sobig in your array. it will notify admin assuming you have admin or
nmladm in your NOTIFY_ADDRS array. if you dont want silent viruses to
go to admin, edit
&email_sender("sender") if
(&valid_virus_to_report($quarantine_description));
&email_sender("admin");
to
&email_sender("sender") if
(&valid_virus_to_report($quarantine_description));
&email_sender("admin") if
(&valid_virus_to_report($quarantine_description));
This is what i do, because i dont care for worm alerts..
Dallas
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
