mv virus infected mail files behind cyrus's back

[Dan MacNeil]

dm> Would would it be clean to replace the file with
dm> another message file [...]

hz> Not unless your replacement message file has the exact
hz> same headers, mime segments and boundaries as the
hz> original message. That information is stored in
hz> the Cyrus.cache file.  You could just remove
hz> the original file and then reconstruct the mailbox.

Thanks, your answer kept us from doing something naughty.

Would we be bad people if we replaced the msg with another that had well
formed headers, mime segments, etc and then reconstructed ?

The goal would be to let people know that something had been pulled from
their mailbox.


Huaqing Zheng wrote:
> On 10/11/05, Dan MacNeil <dan at thecsl.org> wrote:
> 
>>We're moving from courier to cyrus.
>>
>>Right now, when a new clamav virus signature comes we rescan /var/mail
>>and move any infected messages we missed on the way in. Courier is fine
>>w/ this.
>>
>>Cyrus doesn't seem to like it.
>>
>>Would would it be clean to replace the file with another message file
>>containing a notice?
> 
> 
> Not unless your replacement message file has the exact same headers,
> mime segments and boundaries as the original message.   That
> information is stored in the cyrus.cache file.  You could just remove
> the original file and then reconstruct the mailbox.
> ----
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html