Page 1 of 1

Quarantined mail

Posted: Sun Jan 22, 2006 8:12 am
by electronicfur
How do people have their systems setup to handle qmail-scanner quarantined files?

I have some files sitting in the quarantine dir, now what do I do with them?

Is there some way to set up qmail-scanner so it just strips viruses and sends on the clean message?

Cheers,
EF

Posted: Mon Jan 23, 2006 8:36 am
by phoenixisp
What I have done is to create a small script and set a cron job to delete the quarantined files on a daily basis. It's real easy. Let's say that the files in your quarantine folder are named host1.mydomain.com1286942 etc.

Create the file delquarantine in /usr/local/bin. In this file:

#!bin/bash

rm /var/spool/qmailscan/quarantine/new/host1*

Make it executable
#chmod +x /usr/local/bin/delquarantine

The set up a cron to empty the folder each dat at 5:00 AM

00 05 * * * /usr/local/bin/delquarantine

Posted: Tue Jan 24, 2006 9:47 am
by electronicfur
I was going to do that, but when I checked the quarantined mail, I noticed some false positives (regarding "Disallowed content found in MIME attachment" warnings)

So just deleting is not ideal, in case there are false positives.

Posted: Thu Feb 02, 2006 4:09 am
by pepe
I use mutt to view it...

mutt -f /var/spool/qmailscan/quarantine

If mutt is not your system just:

yum install mutt

Hope this helps...