[Avcheck] Removing attachements from virusallerts.

[Michael Tokarev]

Tarjei Huse wrote:
> 
> Hi, would it be possible to remove attachements from the virusalerts recived by
> admins?

What version you're using?  In never version (since pre-0.1 version),
all infected mail handling is done inside a shell (f.e.) script that
can be edited easily.  Just open script you're using with any text
editor, find a place where administrator alert is sent, and remove all
unnecessary parts.

> I'll probably give someone else the responsibility to review the mails going
> into the log, and this someone is not a comp. guy, so I need to have things a
> bit more failproof than today. The mails contain the virusname, that's all we
> need.

A little suggestion: grep your maillogs for strings produced by "avcheck"
(in fact, them produced by the same`infected' script), and send anything
found to that guy daily.

> Tarjei

Regards,
 Michael.

> Avcheck mailing list
> Avcheck@list.innominate.org
> http://innominate.org/mailman/listinfo/avcheck

Avcheck@list.innominate.org is gone (not yet completely),
new list is at avcheck@list.corpit.ru.  Note I CC'd to
the new list.