Re: [Qmail-scanner-general]user interface for quarantine

[Jim M. <jm...@el...>]

Rabid Weasel Lawson wrote:
> On Mon, 2005-09-19 at 15:03 -0400, Jim Maul wrote:
> 
>>Eric Persson wrote:
>>
>>>Jim Maul wrote:
>>>
>>>
>>>>http://toribio.apollinare.org/qmail-scanner/
>>>>
>>>
>>>Yes, I read some parts of that, and it seems to be mostly what I need, 
>>>but is there a user interface for the quarantine available to this patch?
>>>
>>>Best regards,
>>>    Eric
>>>
>>>
>>
>>Not that i am aware of, but the quarantine directory itself is just a 
>>maildir on the system.  You could easily map this quarantine to 
>>directory accessible by imap or whatever and browse through it that way.
>>
>>-Jim
> 
> 
> The problem with that is that whoever accesses that IMAP is then equally
> vulnerable - as if it were an unscanned delivery.
> 
> They have to disable their local PC based AV, make sure that whatever
> they're accessing won't "autorun," and all the other stuff.  And if it's
> just a false positive it might turn up another virus hit when they try
> to mail it to the user.
> 
> 

Sorry, i meant to say webmail imap, not an imap client running on the 
local pc.  Unless you physically download an attachment and run it you 
are pretty safe with this method.

-Jim