[cobalt-users] Re: Mailscanner Question

["B. Runge" <brunge@xxxxxxxxxxx>]

<SNIP>
>>
>>The following e-mail messages were found to have viruses in them:
>>Sender: <>
>>Recipient: <xxxxxxxx@xxxxxxxxxxx>
>>Subject: Delivery Status Notification (Failure)
>>MessageID: h0V2VIZ23687
>>Report: /home/spool/MailScanner/incoming/h0V2VIZ23687/love.scr  Infection:
>>W32/Lentin.M@mm
>>Windows Screensavers often hide viruses in email in love.scr
>>
<SNIP>
>The virus spoofed the header info.  The lot is only part of the info,
>normally mailscanner has more info further down the email that tells you
>where the email actually came from.

Part of the info as it may, that is all the info that was dropped in the
message. I may have over looked the config somewhere but I cannot seem to
locate anything that maybe commented out or need to be changed that would
reflect a more detailed message. A file, location or example would be handy
if you had something readily available.

>The second is mailscanner sending the
>notice to you from your server.  Thus it is the header info from your
>server, not the virus email.

Yes, I understand this I was just intending to provide as much info as I
could to the list that pertained to the message sent to me.

Thanks-
Bill
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.445 / Virus Database: 250 - Release Date: 1/21/2003