Re: deleting emails directly

2015-03-17 Thread Alvin Starr
You could do your virus scans and get a list of infected files. /var/spool/imap/domain/n/namething.net/a/user/alvin/12345. /var/spool/imap/domain/n/namething.net/a/user/alvin/19945. and so on. Then using Mail::IMAPClient and a perl script you can find the message in the users folder and delete

Re: deleting emails directly

2015-03-17 Thread hw
Am 05.03.2015 um 15:01 schrieb Ken Murchison: > On 03/04/2015 05:04 AM, hw wrote: >> Hi, >> >> can I remove or delete emails from the imap directory directly (with rm) >> without screwing things up? >> >> I'm running a virus scan over the spool directory and wonder how to get >> those messages re

Re: deleting emails directly

2015-03-17 Thread hw
Am 04.03.2015 um 11:21 schrieb Simon Fraser: > On Wed, Mar 04, 2015 at 11:13:25AM +0100, Sven Schwedas wrote: > >>> I'm running a virus scan over the spool directory and wonder how to get >>> those messages removed within which a virus has been found. The easiest >>> way would be to let the viru

Re: deleting emails directly

2015-03-17 Thread hw
Am 04.03.2015 um 11:13 schrieb Sven Schwedas: > On 2015-03-04 11:04, hw wrote: >> Hi, >> >> can I remove or delete emails from the imap directory directly (with rm) >> without screwing things up? > > I think cyrreconstruct can be used in such cases, but it's certainly not > the recommended way to

Re: deleting emails directly

2015-03-05 Thread Ken Murchison
On 03/04/2015 05:04 AM, hw wrote: > Hi, > > can I remove or delete emails from the imap directory directly (with rm) > without screwing things up? > > I'm running a virus scan over the spool directory and wonder how to get > those messages removed within which a virus has been found. The easiest >

Re: deleting emails directly

2015-03-04 Thread John Wade
arshc@lists.andrew.cmu.edu > [info-cyrus-bounces+gabriel.forster=searshc@lists.andrew.cmu.edu] on > behalf of Sebastian Hagedorn [haged...@uni-koeln.de] > Sent: Wednesday, March 04, 2015 7:06 AM > To: John Wade > Cc: info-cyrus@lists.andrew.cmu.edu > Subject: Re: deleting emai

Re: deleting emails directly

2015-03-04 Thread John Wade
This is why we implemented the IMAP delete option, changing the message is a hack. Thanks for clarifying why, John On 3/4/2015 6:06 AM, Sebastian Hagedorn wrote: > --On 4. März 2015 05:33:44 -0600 John Wade wrote: > >> The tool we wrote for phishing scans the Cyrus imap server's imap spool >>

Re: deleting emails directly

2015-03-04 Thread Andrea Venturoli
On 03/04/15 11:04, hw wrote: > I'm running a virus scan over the spool directory and wonder how to get > those messages removed within which a virus has been found. The easiest > way would be to let the virus scanner do this, and the virus scanner > doesn't use IMAP. I've used ISBG in the past (

RE: deleting emails directly

2015-03-04 Thread Forster, Gabriel
[info-cyrus-bounces+gabriel.forster=searshc@lists.andrew.cmu.edu] on behalf of Sebastian Hagedorn [haged...@uni-koeln.de] Sent: Wednesday, March 04, 2015 7:06 AM To: John Wade Cc: info-cyrus@lists.andrew.cmu.edu Subject: Re: deleting emails directly --On 4. März 2015 05:33:44 -0600 John Wade

Re: deleting emails directly

2015-03-04 Thread Sebastian Hagedorn
--On 4. März 2015 05:33:44 -0600 John Wade wrote: The tool we wrote for phishing scans the Cyrus imap server's imap spool file systems looking for a specific text string in specific user's mailboxes in recent messages. Te search can be done either recursively or just the inbox.It then loo

Re: deleting emails directly

2015-03-04 Thread John Wade
We wrote a tool to deal with mass spear phishing attacks that were not successfully blocked by our anti-spam appliances. ( On the antivirus note, we scan email three different ways, with the next gen firewall, with the antispam appliance, and then on the desktops when mail is accessed. Due t

Re: deleting emails directly

2015-03-04 Thread Simon Fraser
On Wed, Mar 04, 2015 at 11:13:25AM +0100, Sven Schwedas wrote: > > I'm running a virus scan over the spool directory and wonder how to get > > those messages removed within which a virus has been found. The easiest > > way would be to let the virus scanner do this, and the virus scanner > > do

Re: deleting emails directly

2015-03-04 Thread Sven Schwedas
On 2015-03-04 11:04, hw wrote: > Hi, > > can I remove or delete emails from the imap directory directly (with rm) > without screwing things up? I think cyrreconstruct can be used in such cases, but it's certainly not the recommended way to delete mails. > I'm running a virus scan over the spool

deleting emails directly

2015-03-04 Thread hw
Hi, can I remove or delete emails from the imap directory directly (with rm) without screwing things up? I'm running a virus scan over the spool directory and wonder how to get those messages removed within which a virus has been found. The easiest way would be to let the virus scanner do thi