[glux] Virus [Lungo]
Comolago.com
massimo@comolago.com
Mer 17 Nov 2004 10:36:37 CET
Ciao a tutti,
da due o tre giorni mi arrivano msg come quello sotto.
La domanda e': come faccio ad avvisare il soggetto che c'e' in
MAILFROM ?
Oppure qmail lo avvisa in automatico??
Alla prossima.
MAX
Attention: i33365@mailhub.9netave.it
A virus was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.
The virus was reported to be:
Worm.SomeFool.Gen-1
Please update your virus scanner or contact your IT support
personnel as soon as possible as you may have a virus on your system.
Your message was sent with the following envelope:
MAIL FROM: i33365@mailhub.9netave.it
RCPT TO: info@gioielleriecolombo.com
... and with the following headers:
---
MAILFROM: i33365@mailhub.9netave.it
Received: from adsl-34-100.36-151.net24.it (HELO gioielleriecolombo.com)
(151.36.100.34)
by gioielleriecolombo.com with SMTP; 17 Nov 2004 09:56:30 +0100
From: i33365@mailhub.9netave.it
To: info@gioielleriecolombo.com
Subject: Re: Re: Document
Date: Wed, 17 Nov 2004 10:05:12 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0001_00000B90.00003A22"
X-Priority: 3
X-MSMail-Priority: Normal
---
The original message is kept in:
gioielleriecolombo.com:/var/spool/qmailscan/quarantine/new/gioielleriecolombo.com11006817916203240
where the can further diagnose it.
The Email scanner reported the following when it scanned that message:
---
---clamdscan results ---
/var/spool/qmailscan/tmp/gioielleriecolombo.com11006817916203240/orig-gioielleriecolombo.com11006817916203240: Worm.SomeFool.Gen-1 FOUND
/var/spool/qmailscan/tmp/gioielleriecolombo.com11006817916203240/your_document.pif: Worm.SomeFool.Gen-1 FOUND
/var/spool/qmailscan/tmp/gioielleriecolombo.com11006817916203240/1100681800.3242-0.gioielleriecolombo.com: OK
---
Maggiori informazioni sulla lista
glux