Re: [vps-mail] ClamAV Email Message

[Scott Wiersdorf <scottw@xxxxxxxxxxxx>]

On Wed, Mar 17, 2004 at 04:04:55PM -0500, John Oligario wrote:
> Hello,
> 
> Last week I installed the updated ClamAV onto my VPS2, which works great by
> the way.  However I now have the problem of every single time a virus is
> caught, I get notified as well as the enduser.

This, I think, is not the default behavior. Have you modified your
procmailrc file to send a notice to the recipient? We discussed this
last week (or maybe two weeks ago) on this list I believe. Maybe
you're using one of the recipes that was floated.

> Is there anyway to reroute
> the virus email to one specific per domain on the VPS2?  Ie, at one company,
> the CFO wants to get the list of emails containing virus' but does not want
> the rest of the people to get the email.

Your responder, which might look something like this:

<snip>
    :0
    * ^Subject: infected!
    {
      :0c:
      $HOME/quarantine

      SUBJECT=`formail -zxSubject:`
      :0 h
      | (formail -i"From: Virus Scanner <root@xxxxxxxxxx>" \
        -I"Subject: VIRUS FOUND (was: $SUBJECT)"; \
        cat virus_message.txt;) | $SENDMAIL -t
    }
</snip>

should be modified to look more like this (notice the '-i"To: ..."'
line):

<snip>
    :0
    * ^Subject: infected!
    {
      :0c:
      $HOME/quarantine

      SUBJECT=`formail -zxSubject:`
      :0 h
      | (formail -i"To: CEO Joe Schmoe <joe@xxxxxxxxxx>" \
        -i"From: Virus Scanner <root@xxxxxxxxxx>" \
        -I"Subject: VIRUS FOUND (was: $SUBJECT)"; \
        cat virus_message.txt;) | $SENDMAIL -t
    }
</snip>

Scott
-- 
Scott Wiersdorf
scottw@xxxxxxxxxxxx
======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).