[Esd-l] Executable got through sanitizer

Marcus Williams marcus at quintic.co.uk
Tue Sep 11 02:56:01 PDT 2001


> -----Original Message-----
> From: John D. Hardin [mailto:jhardin at impsec.org]
[snip]
>
> Ain't that how it goes. You automatically prune your quarantine?
>
[snip]

No, but it didnt get quarantined - before the sanitizer gets trapped I
run all incoming mail thru a simple backup recipe that keeps a
rotating set of the last 250 messsages coming through the system.
Useful when messages arent quarantined and I want to know why (or when
updates to my site-trap.rc or htmp-trap.rc break incoming email!!!).
Unfortunately this time I forgot to pull a copy out of the backup set
so it wouldnt get removed.

I'd never really thought about pruning the quarantine but now you say
it I might....

Marcus



More information about the esd-l mailing list