[Esd-l] Executable got through sanitizer
marcus at quintic.co.uk
Tue Sep 11 02:56:01 PDT 2001
> -----Original Message-----
> From: John D. Hardin [mailto:jhardin at impsec.org]
> Ain't that how it goes. You automatically prune your quarantine?
No, but it didnt get quarantined - before the sanitizer gets trapped I
run all incoming mail thru a simple backup recipe that keeps a
rotating set of the last 250 messsages coming through the system.
Useful when messages arent quarantined and I want to know why (or when
updates to my site-trap.rc or htmp-trap.rc break incoming email!!!).
Unfortunately this time I forgot to pull a copy out of the backup set
so it wouldnt get removed.
I'd never really thought about pruning the quarantine but now you say
it I might....
More information about the esd-l