#1  
Old 13th February 2006, 02:45
abianci abianci is offline
Junior Member
 
Join Date: Jan 2006
Posts: 4
Thanks: 0
Thanked 0 Times in 0 Posts
Default Enabling Quarantine

Hi folks,

I'm trying to enable the quarantine for Spamassassin/Clamav/TrashScan to store suspicious files instead of defanging or sending just the suspicious attachment notice.

I'd like to remove the suspicious files from the emails, and store them in some directory so I can recover the ones I want.

I have absolutely no clue about how to do it. I have a Fedora Core 3 with the latest ISPConfig version.

Any ideas?

Last edited by abianci; 13th February 2006 at 03:08. Reason: Adding email notification
Reply With Quote
Sponsored Links
  #2  
Old 13th February 2006, 09:44
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,727 Times in 2,565 Posts
Default

If you use Maildir you can use maildirmake to create a virus folder for each user: http://www.howtoforge.com/forums/showthread.php?t=1147

You can then change /root/ispconfig/isp/conf/antivirus.rc.master as follows:

Code:
#
# procmail configuration for TrashScan: ZapCoded by Trashware; 13.10.2002
#

# [ ... ]

# ------------------------------------------------------------------------------------- #
# Virus scan section ...                                                                #
# ------------------------------------------------------------------------------------- #

# 1. Run TrashScan
:0
* multipart
* !^X-Virus-Scan:
| /home/admispconfig/ispconfig/tools/clamav/bin/trashscan

# 2. Filter tagged virus mails
:0:
* ^X-Virus-Scan: Suspicious
$HOME/virus
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 6th April 2006, 21:30
Cirox Cirox is offline
Member
 
Join Date: Mar 2006
Posts: 36
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Hi,

i think for Maildir with courier there had to be a slash after the last folder ?

Code:
$HOME/virus/
thats right ?

But thinking about it, mails were tagged a suspicious but will be delivered to this folder. Theres now way to send the suspicios message to this folder and to store the virus in quarantine ?

greetings cirox
Reply With Quote
  #4  
Old 6th April 2006, 22:37
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,727 Times in 2,565 Posts
 
Default

Quote:
Originally Posted by Cirox
Hi,

i think for Maildir with courier there had to be a slash after the last folder ?

Code:
$HOME/virus/
thats right ?
I don't know if this makes a difference.

Quote:
Originally Posted by Cirox
Theres now way to send the suspicios message to this folder and to store the virus in quarantine ?
Maybe there's some kind of procmail recipe that can split the attachment from the mail and store it in a quarantine folder, but I'm not sure...
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Enabling MySQL on port southcot HOWTO-Related Questions 4 19th November 2005 21:39


All times are GMT +2. The time now is 19:09.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.