SLUG Mailing List Archives
[SLUG] Calling Sendmail Ninjas.....
- To: slug@xxxxxxxxxxx
- Subject: [SLUG] Calling Sendmail Ninjas.....
- From: Tony Green <tgreen@xxxxxxxxxxxxxx>
- Date: Thu May 10 14:41:37 2001
- User-agent: Mutt/1.3.17i
Calling all Sendmail Ninjas.....
I've been mulling over a problem for a few days now and thought I would
open it up to the world of Slug for a bit of brain storming.
We (at work) are using Trend for Email AV scanning. Trend has the
functionality to send emails to the sender and receipiant of infected
mails reporting they have sent an infected attachment.
So far, so good..... Then the marketing department get their hands on
the product spec.
They have dictated that the system must be able to comply with the
* Mail the sender if the sender is our customer (lookup table)
* Change the subject line of the original mail
* Change the body of the text
Trend alone cannot do this - it is very limited in the way it can send
out the infected alerts, hence my problem.
I am thinking of using libmilter to create a filter which will scan ALL
email, decide (by the presence/absence of an X header or certain text in
the body) if it needs to process the email as a virus warning. If it is
a virus warning, it needs to rewrite the subject and body, then reattach
the original file and send it to the original receipiant - then decide if
it needs to warn the sender too.
I have thought about using a number of different ways - including a new
delivery agent (still a good possibility) and procmail (won't do everything
I need cleanly).
Anyone interested in brainstorming????
GnuPG Key : 1024D/B5657C8B
Key fingerprint = 9ED8 59CC C161 B857 462E 51E6 7DFB 465B B565 7C8B
Imagine working in a secure environment and finding the string
_NSAKEY in the OS binaries without a good explanation
-Alan Cox 04/05/2001