hilfe mein git ist komisch

This commit is contained in:
cutemeli
2026-01-08 18:34:49 +01:00
parent 710537a25d
commit b2d2dce845
4644 changed files with 94994 additions and 1763 deletions

51
etc/drweb/addresses.conf Normal file
View File

@@ -0,0 +1,51 @@
#
# Address list for DrWeb Mail Filters
#
# The file with the list of addresses allows to block notifications
# to specified addresses or group of addresses depending on address role
# in mail transaction.
#
#
# Format of file:
# ---------------
# Line beginning with # - it's a comments
# Empty lines are acceptable
#
# Version 1 (default):
# <role> <address_re>
# where
# <role> - defines role (from, to, any) of address in envelope
# <address_re> - the address matching string which is interpreted as POSIX
# regular expression (regexp), should be in quotes if contains spaces.
# Operation NOT can be used (symbol '!' before quoted regexp), that
# means do not send notifications to address which is not matched by
# regexp. If expression matches to expression then search continues.
# Operation NOT is very useful to send notifications only for local
# users. Operation NOT for @example.com equivalent to
# "@[^e][^x][^a][^m][^p][^l][^\.][^c][^o][^m]".
#
# NOTE:
# - regexp's are case insensitive
# - symbol ! also can be used as part of regexp, but should be inside of quotes
# In other words, lines below have different meanings.
# any !"user@example\.com"
# any "!user@example\.com"
#
# [version=1]
#
# do not send notification to asv@drweb.ru when he sends a virus,
# but send notification when virus came to him
#
#from "asv@drweb\.ru"
#
#
# do not send notifications to users from example.com when virus came to them,
# but send notifications when virus came from them
#
#to "@example\.com"
#
#
# do not send notifications to non-local (not from mydomain.ru) users
#
#any !"@mydomain\.ru"
#any !"@(mydomain1)|(mydomain2)\.ru"

View File

@@ -0,0 +1,14 @@
# Dr.Web (R) Unix Control Agent meta config file.
# Meta config file describes how a drweb-agent program
# returns config to other applications.
Application "DAEMON"
ID 9
IniFile "/etc/drweb/drweb32.ini"
Components
drwebd Daemon
EndComponents
EndApplication

403
etc/drweb/drweb32.ini Normal file
View File

@@ -0,0 +1,403 @@
# Dr.Web (R) Configuration file
# $Revision: 1.90.2.19 $
[Daemon]
# ===================================
# = Dr.Web Daemon general settings. =
# ===================================
# EnginePath = {FilePath}
# Path to drweb32.dll (Antivirus Engine).
EnginePath = /var/drweb/lib/drweb32.dll
# VirusBase = {Lookups}
# Masks for downloaded virus databases.
VirusBase = /var/drweb/bases/*.vdb
# UpdatePath = {FilePath}
# Path to directory, where files dowloaded by updating module are stored.
UpdatePath = /var/drweb/updates
# TempPath = {FilePath}
# Path to directory used by antivirus module (Engine) for creating of temporary
# files.
TempPath = /var/drweb/spool
# Key = {FilePath}
# Location of the key file (license or demo).
Key = /opt/drweb/drweb32.key
# PleskPublicKey = {FilePath}
# Path to Plesk public RSA key file.
PleskPublicKey = /etc/drweb/plesk.key
# OutputMode = {Quiet|Terminal}
# Information output mode at start.
OutputMode = Terminal
# RunForeground = {Boolean}
# Possibility for Daemon to operate in the foreground and not in daemon mode.
RunForeground = no
# User = {String}
# User account with appropriate rights to run Daemon.
User = drweb
# PidFile = {FilePath}
# Path to file where Daemon PID and socket or the port number will be written to
# at start.
PidFile = /var/drweb/run/drwebd.pid
# BusyFile = {FilePath}
# Path to Daemon busy file.
BusyFile = /var/drweb/run/drwebd.bsy
# ProcessesPool = {String}
# Process pool settings.
ProcessesPool = auto,timeout=120,stop_timeout=1,stat=no
# OnlyKey = {Boolean}
# When enabled, only the key file will be requested from Agent and not the
# configuration settings .
# OnlyKey = no
# ControlAgent = {String}
# Agent address.
# ControlAgent = local:/var/drweb/ipc/.agent
# MailCommand = {String}
# Command used by Daemon and Updater to send notifications to a user
# (administrator) via e-mail.
MailCommand = "/usr/sbin/sendmail -i -bm -f drweb -- root"
# NotifyPeriod = {Digital}
# Number of days before license key expiration to start sending notifications
# about license renewal.
NotifyPeriod = 2
# NotifyFile = {FilePath}
# Path to file with a timestamp of last notification sent to Administrator about
# license key expiration.
NotifyFile = /var/drweb/.notify
# NotifyType = {Ever|Everyday|Once}
# Frequency of notifications dispatch.
NotifyType = Everyday
# FileTimeout = {Digital}
# Maximum time to one file scan in seconds
FileTimeout = 30
# StopOnFirstInfected = {Boolean}
# Termination of email message scan after detection of the first virus.
StopOnFirstInfected = no
# ScanPriority = {String}
# Daemon processes priority.
# ScanPriority = 0
# FilesTypes = {MultiString} (EXE,COM,SYS,OV?,BAT,BIN,DRV,PRG,BOO,
# SCR,CMD,VXD,386,DLL,FON,DO?,XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,AR?,
# ZIP,R??,PP?,OBJ,LIB,HLP,MD?,INI,MBR,IMG,CSC,CPL,MBP,SHS,SHB,PIF,
# SO,CHM,REG,XML,PRC,ASP,LSP,MSO,OBD,THE*,NWS,SWF,BMP,MPP,OCX,DVB,
# CPY,MSG,EML)
# File types to be checked during "by type" scan.
# FilesTypes = EXE,COM,SYS,OV?,BAT,BIN,DRV,PRG,BOO,SCR,CMD,VXD,386,DLL,FON,DO?
# FilesTypes = XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,AR?,ZIP,R??,PP?,OBJ,LIB,HLP,MD?
# FilesTypes = INI,MBR,IMG,CSC,CPL,MBP,SHS,SHB,PIF,SO,CHM,REG,XML,PRC,ASP,LSP
# FilesTypes = MSO,OBD,THE*,NWS,SWF,BMP,MPP,OCX,DVB,CPY,MSG,EML
# FilesTypesWarnings = {Boolean}
# Unknown file types warnings.
FilesTypesWarnings = yes
# ScanFiles = {ByType|All}
# Restriction for files to be checked.
# * All - scan all files
# * ByType - scan only files with allowed types (specified by default
# and in FileTypes parameter)
# In mailboxes are always scanned all files (always All value used).
# Value ByType can be used only in local scan mode (in other modes
# always All value used).
# Attention! If in Drweb anti-virus plug-in configuration value of parameter
# ScanType is specified to local or auto, then ByType value will force to pass
# all messages WITHOUT anti-virus checking!
ScanFiles = All
# CheckArchives = {Boolean}
# Whether to unpack archives, or not.
CheckArchives = yes
# CheckEMailFiles = {Boolean}
# Whether to scan files in e-mail formats, or not.
CheckEMailFiles = yes
# ExcludePaths = {Lookups}
# Masks for files to be excluded from scan by Daemon.
ExcludePaths = /proc,/sys,/dev
# FollowLinks = {Boolean}
# Whether to follow symbolic links, or not.
FollowLinks = no
# RenameFilesTo = {String}
# Mask for renaming files using custom file extension.
RenameFilesTo = #??
# MoveFilesTo = {DirPath}
# Path to quarantine directory.
MoveFilesTo = /var/drweb/infected
# BackupFilesTo = {DirPath}
# Path to directory used to store backups of infected files, which have been
# cured.
BackupFilesTo = /var/drweb/infected
# LogFileName = {FilePath}
# Log filename.
LogFileName = syslog
# SyslogFacility = {
# Mail|
# User|
# Kern|
# Local7|
# Local6|
# Local5|
# Local4|
# Local3|
# Local2|
# Local1|
# Local0|
# Daemon
# }
# Sets the log type when using syslogd system service.
SyslogFacility = Daemon
# SyslogPriority = {Error|Info|Notice|Warning|Alert}
# Sets the log priority when using syslogd system service.
# SyslogPriority = Info
# LimitLog = {Boolean}
# Specifies whether the log file size must be limited, or not.
LimitLog = no
# MaxLogSize = {Digital}
# Maximum log file size.
MaxLogSize = 512
# LogScanned = {Boolean}
# Whether to log or not information about all checked objects (infected and
# clean).
LogScanned = yes
# LogPacked = {Boolean}
# Whether to log or not additional information about files packed by DIET, PKLITE
# and similar utilities.
LogPacked = yes
# LogArchived = {Boolean}
# Whether to log or not additional information about files archived by RAR, ZIP,
# TAR and similar archivers.
LogArchived = yes
# LogTime = {Boolean}
# Whether to log or not the time for each record.
LogTime = yes
# LogProcessInfo = {Boolean}
# Whether to log or not clients address (hostname or IP) and PID of every
# scanning process.
LogProcessInfo = yes
# RecodeNonprintable = {Boolean}
# Output mode for nonprintable characters.
RecodeNonprintable = yes
# RecodeMode = {QuotedPrintable|Replace}
# Specifies decoding method for nonprintable characters.
RecodeMode = QuotedPrintable
# RecodeChar = {Char}
# Defines symbol to replace nonprintable characters if RecodeMode parameter value
# is set to "Replace".
RecodeChar = "?"
# Socket = {MultiString} (/var/drweb/run/.daemon,3000, localhost)
# Description of socket used for communication with Daemon.
Socket = /var/drweb/run/.daemon
Socket = 3000, localhost
# SocketTimeout = {Digital}
# Timeout in seconds to receive/send data through socket (if 0 - unlimited).
SocketTimeout = 10
# MaxCompressionRatio = {String}
# Maximum archive compression ratio.
MaxCompressionRatio = 500
# CompressionCheckThreshold = {Digital}
# Minimum size of a file inside archive (in KBytes) beginning from which the compression
# ratio check will be performed. If 0 - check will not be performed.
CompressionCheckThreshold = 1024
# MaxFileSizeToExtract = {Digital}
# Maximum size of a file to be extracted from archive (in KBytes). If 0 - unlimited.
MaxFileSizeToExtract = 40960
# MaxArchiveLevel = {Digital}
# Maximum archive nesting level.
MaxArchiveLevel = 8
# ClientsLogs = {String}
# Splitting the log files.
# ClientsLogs = drwebdc:/var/drweb/log/drwebdc.log,smb_spider:syslog,mail:/var/drweb/log/drwebmail.log,kerio:syslog,lotus:syslog
# MaxBasesObsolescencePeriod = {Digital}
# A maximum period of time (in hours) since the last update to consider virus
# bases up-to-date.
MaxBasesObsolescencePeriod = 24
# MessagePatternFileName = {String}
# Path to template for message about license expiration.
MessagePatternFileName = /etc/drweb/templates/drwebd/msg.tmpl
# MailTo = {String}
# Administrator email address
MailTo =
[Updater]
# =============================
# = Updater general settings. =
# =============================
# WorkingDir = {DirPath}
# Path to working dir of updater.
WorkingDir = /var/drweb/updater/
# UpdatePluginsOnly = {Boolean}
# Possibility to update plug-ins only, without updating of Daemon and Scanner at
# the same time.
UpdatePluginsOnly = no
# Section = {Scanner|Daemon}
# Defines which component must be updated.
Section = Daemon
# ProgramPath = {FilePath}
# Path to program files.
ProgramPath = /opt/drweb/drwebd
# SignedReader = {FilePath}
# Path to program used by Updater to read signed files.
SignedReader = /opt/drweb/read_signed
# LzmaDecoderPath = {DirPath}
# Path to program used by Updater to unpack lzma-archives.
LzmaDecoderPath = /opt/drweb
# LockFile = {FilePath}
# Path to file used to prevent sharing of certain files during update.
LockFile = /var/drweb/run/update.lock
# CronSummary = {Boolean}
# Enables output of update session log to stdout.
CronSummary = yes
# DrlFile = {FilePath}
# Path to file with list of currently available update servers.
DrlFile = /var/drweb/bases/update.drl
# CustomDrlFile = {FilePath}
# Path to alternative file with list of currently available update servers.
CustomDrlFile = /var/drweb/bases/custom.drl
# FallbackToDrl = {Boolean}
# Defines behavior of Updater if both DrlFile and CustomDrlFile parameters are
# set.
FallbackToDrl = yes
# DrlDir = {DirPath}
# Path to directory containing signed files with lists of update servers for
# plug-ins.
DrlDir = /var/drweb/drl
# Timeout = {Digital}
# Timeout for updates to be downloaded.
Timeout = 90
# Tries = {Digital}
# Number of attempts Updater makes to download updated files.
Tries = 3
# ProxyServer = {Address}
# IP-address of a proxy server to be used during update process.
ProxyServer =
# ProxyLogin = {String}
# Proxy server authentication username.
ProxyLogin =
# ProxyPassword = {String}
# Proxy server authentication password.
ProxyPassword =
# LogFileName = {FilePath}
# Log filename.
LogFileName = syslog
# LogLevel = {Quiet|Error|Warning|Info|Verbose|Debug}
# Log verbosity level.
LogLevel = Info
# SyslogFacility = {
# Mail|
# User|
# Kern|
# Local7|
# Local6|
# Local5|
# Local4|
# Local3|
# Local2|
# Local1|
# Local0|
# Daemon
# }
# Sets the log type when using syslogd system service.
SyslogFacility = Daemon
# LotusdPidFile = {FilePath}
# Path to pid file of Lotusd.
LotusdPidFile = /var/drweb/run/drweblotusd.pid
# MaildPidFile = {FilePath}
# Path to pid file of Maild.
MaildPidFile = /var/drweb/run/drweb-maild.pid
# IcapdPidFile = {FilePath}
# Path to pid-file of Icapd.
IcapdPidFile = /var/drweb/run/drweb_icapd.pid
# BlackListPath = {DirPath}
# Path to dir with dws-files.
BlackListPath = /var/drweb/dws
# AgentConfPath = {FilePath}
# Path to agent config file.
AgentConfPath = /etc/drweb/agent.conf
# PathToVadeRetro = {FilePath}
# Path to shared library libvaderetro.so .
PathToVadeRetro = /var/drweb/lib/libvaderetro.so
# ExpiredTimeLimit = {Digital}
# A number of days left before license key file expiration. During this period
# Updater will make attempts to renew the key.
ExpiredTimeLimit = 14
# ESLockfile = {FilePath}
# Path to lockfile. There is the file, so the updater can not do its work.
ESLockfile = /var/drweb/run/es_updater.lock

View File

@@ -0,0 +1,462 @@
#
# Configuration file for Plesk Premium Antivirus Filters
# $Revision: 1.70 $
#
#########################
# Communication section #
#########################
[DaemonCommunication]
# Definition of daemon's addresses separated by `,' and given
# in a special form {FAMILY}:{ADDRESS}
# where FAMILY is one of:
# inet - TCP/IP socket used`,' then {ADDRESS} is {PORT}@{HOST}
# local - UNIX socket used`,' then {ADDRESS} is {SOCKETFILE}
# pid - get daemon address from pidfile`,' then {ADDRESS} is {PIDFILE}
# Examples:
# Address = inet:3000@localhost
# Address = local:/usr/local/drweb/run/drwebd.skt
# Address = pid:/usr/local/drweb/run/drwebd.pid
# Address = pid:/var/drweb/run/drwebd.pid`,' inet:3000@backup_server.example.com
Address = inet:3000@localhost
# Enable/disable caching of the resolved daemon host
# (useful only if daemon uses TCP/IP communications)
Cache = yes
# Timeout for the whole scanning session (seconds)
Timeout = 120
# Set/unset socket option TCP_NODELAY
# (Do not set this option if you have not network problem)
UseTcpNodelay = no
########################
# Scan options section #
########################
[Scanning]
# Enable or disable heuristic analyzer in virus-finding engine (on/off)
HeuristicAnalysis = on
# Strip the smallest prefix containing StripPath leading slashes
# NOTE: This option works same as the -p parameter in patch utility
# StripPath = 2
# Path that prefixes scan paths. Applied to path processed by StripPath.
# NOTE: PrefixPath MUST NOT end with a slash (/)
# PrefixPath = /sandbox/mail
# Include DrWeb report to notifications into $REPORT$
# or as a separate macros $DAEMON_REPORT$ (yes/no)
IncludeReport = yes
# Include DrWeb extended codes to notifications into $REPORT$
# or as a separate macros $SCAN_STAT$ (yes/no)
IncludeStats = yes
# Max size of the report that will be created if IncludeReport is "yes",
# Specify 0 for the non-restrictable size, but it's a bad idea - report can
# grow to Mbytes for nested archives
ReportMaxSize = 8192
# Enable or disable local scanning mode (see daemon documentation) (yes/no)
# LocalScan affects only connection with first daemon in the Address list
# If enabled then spool directory must be readable (writable for EVAL key)
# for drwebd process (see drweb32.ini option User)
LocalScan = yes
# Enable or disable daemon rule filter (on/off)
RuleFilter = on
# Set rule to deny scanning by addresses:
# * byAll - deny if all addresses (sender and recipients) are denied in DenyList
# (obsolete DenyOnOne = no)
# * byOne - deny if only one address (sender or recipient) is denied in DenyList
# (obsolete DenyOnOne = yes)
# * bySender - deny if sender's address is denied (recipients are not checked)
# * bySenderAndOneRecipient - deny if sender's and one of the recipient's addresses
# are denied in DenyList
# * byOneRecipient - deny if one of the recipient's addresses are denied in DenyList
# (sender address is not checked)
# * byAllRecipients - deny if all of the recipient's addresses are denied in DenyList
# (sender's address is not checked)
DenyMode = byAllRecipients
# Set deny(yes)/allow(no) scanning for addresses
# which were not found in DenyList (see below)
DenyByDefault = no
# List with rules for users or domains to block scanning
DenyList = /etc/drweb/users.conf
# Directory used to store temporary files
Spool = /var/spool/drweb/spool
# Permissions for created spool files
SpoolFilesMode = 0664
# Naming convention for spool files
# * Std - standard, using mkstemp (template: drweb.tmp.XXXXXX)
# * Tai - use TAI format template (template: %sec.%usec.drweb.tmp.XXXXXX)
# * Rand48 - using exclusive open and lrand48 (template: drweb.tmp.XXXXXXXX)
SpoolFilenamesMode = Std
# Prefix for the spool filename (%{Spool}/%{SpoolFilenamesPrefix}XXXXXX)
SpoolFilenamesPrefix = drweb.tmp.
###################
# Actions section #
###################
[Actions]
# ---------------------------------------------------------------------------
# NOTES:
#
# 1) If you don't use quarantine action for some reason, please check
# appropriate notification message templates. If needed, remove text specifying
# the location where the original message is saved.
#
# 2) Disinfected message should be repacked if you use "cure" or "remove" actions.
# If the repacking procedure fails, then CureFail action should be applied.
# Incurable and CureFail actions will never be used if you do not use
# "cure" action for Infected.
# ---------------------------------------------------------------------------
#
# The action taken if an object was not checked by license limitations.
# Actions:
# pass - pass such messages
# reject - reject such messages with permanent error
# tempfail - reject such message with temporary error
LicenseLimit = pass
# Infected means that a message is infected with one of the known virus
# Actions:
# cure - cure infected attachment(s) and generate cleaned message
# remove - remove infected attachment(s) and generate cleaned message
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
Infected = quarantine
# Suspicious means that a message is possibly infected with one of the new virus
# it may be a false alarm (can occur if HeuristicAnalysis is on only)
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
Suspicious = quarantine
# Incurable means that a message contains infected attachment(s)
# which cannot be cured.
# This action is applied only if Infected = cure
# Actions:
# remove - remove infected attachment(s) and generate cleaned message
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
Incurable = quarantine
# CureFail means that daemon failed to cure (remove) files
# or generated cleaned message
# Actions:
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
CureFail = quarantine
# RuleFilterAlert - means that the message matches FiltersRule in drweb32.ini
# possible only if RuleFilter = on
# Actions:
# discard - discard such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# reject - reject such messages with permanent error
RuleFilterAlert = reject
# Adware means that a message contains an advertizing program.
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
Adware = quarantine
# Dialer means that a message contains a dialer program that usually is
# used by porno sites.
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
Dialers = quarantine
# Joke means that a message contains a joke program (hoax).
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
Jokes = quarantine
# Riskware means that a message contains a potentially dangerous software.
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
Riskware = quarantine
# Hacktool means that a message contains an intrusion tool.
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# discard - discard such messages
# reject - reject such messages with permanent error
Hacktools = quarantine
# EmptyFrom means that SMTP session was initiated with empty envelope From:
# used for mail notifications (reports) and by spammers
# Actions:
# continue - continue processing such messages
#
# ATTENTION: Your MTA would not be RFC-compliant if you set up
# non-continue action and can be banned by www.rfc-ignorant.org site.
# "The MTA MUST accept messages with <> sender."
# (rfc-2505 see 2.6.1)
#
# discard - discard such messages
# reject - reject such messages with permanent error
EmptyFrom = continue
# SkipObject means that daemon found an object that cannot be checked:
# password protected archive, broken archive, sym-link,
# non regular file, timeout
# (see SocketTimeout and FileTimeout in drweb32.ini).
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# reject - reject such messages with permanent error
SkipObject = pass
# ArchiveRestriction means that daemon found an object in archive with
# compression ratio exceeding MaxCompressionRation, size of object is greater
# than MaxFileSizeToExtract or level of nested archive is greater
# than MaxArchiveLevel from drweb32.ini
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# reject - reject such messages with permanent error
ArchiveRestriction = quarantine
# ScanningErrors means that daemon fails to scan current object. Example of
# cases: no memory, cannot read file for check (no permissions).
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# redirect - redirect to RedirectMail and discard message
# (or reject if discard does not supported)
# reject - reject such messages with permanent error
# tempfail - reject such message with temporary error
ScanningErrors = quarantine
# ProcessingErrors means errors in proxy-client: no memory, misconfigured,
# timeout on communication with daemon and etc.
# Actions:
# pass - pass such messages
# quarantine - move such messages to quarantine and discard
# (or reject if discard does not supported)
# reject - reject such messages with permanent error
# tempfail - reject such message with temporary error
ProcessingErrors = reject
# PassEmptyFromIfNoDaemon - if this parameter is set to yes, then messages from
# <> would be passed if filter cannot connect to
# daemon and ProcessingErrors is set to "reject"
PassEmptyFromIfNoDaemon = no
# Admin mail address (should be qualified)
AdminMail = postmaster
# Mail address for redirect action (should be qualified)
RedirectMail = postmaster
# Filter address to be used in From: (should be qualified)
FilterMail = DrWEB-DAEMON
# List of unnotificable viruses
UnnotificableVirusesList = /etc/drweb/viruses.conf
# List of unnotificable addresses
UnnotificableAddressesList = /etc/drweb/addresses.conf
# Quarantine directory.
# The infected files could be moved in that dir
# if you leave this field empty or commented out then
# infected messages will not be stored
Quarantine = /var/spool/drweb/infected
# Permissions for quarantined files
QuarantineFilesMode = 0660
# Naming convention for spool files
# * Std - using mkstemp (template: drweb.quarantine.XXXXXX)
# * Tai - use TAI format (template: %sec.%usec.drweb.quarantine.XXXXXX)
# * Rand48 - using lrand48 (template: drweb.quarantine.XXXXXXXX)
QuarantineFilenamesMode = Std
# Prefix for spool filename (%{Quarantine}/%{QuarantineFilenamesPrefix}XXXXXX)
QuarantineFilenamesPrefix = drweb.quarantine.
#########################
# Notifications section #
#########################
[VirusNotifications]
# Enable or disable sending notifications to persons (yes/no)
SenderNotify = yes
AdminNotify = yes
RcptsNotify = yes
# Files with notification templates
SenderTemplate = /etc/drweb/templates/en/sender_virus.msg
AdminTemplate = /etc/drweb/templates/en/admin_virus.msg
RcptsTemplate = /etc/drweb/templates/en/rcpts_virus.msg
[MalwareNotifications]
# Enable or disable sending notifications to persons (yes/no)
SenderNotify = yes
AdminNotify = yes
RcptsNotify = yes
# Files with notification templates
SenderTemplate = /etc/drweb/templates/en/sender_malware.msg
AdminTemplate = /etc/drweb/templates/en/admin_malware.msg
RcptsTemplate = /etc/drweb/templates/en/rcpts_malware.msg
[CuredNotifications]
SenderNotify = yes
AdminNotify = yes
SenderTemplate = /etc/drweb/templates/en/sender_cured.msg
AdminTemplate = /etc/drweb/templates/en/admin_cured.msg
[SkipNotifications]
SenderNotify = yes
AdminNotify = no
RcptsNotify = no
SenderTemplate = /etc/drweb/templates/en/sender_skip.msg
AdminTemplate =
RcptsTemplate =
[ArchiveRestrictionNotifications]
SenderNotify = yes
AdminNotify = yes
RcptsNotify = no
SenderTemplate = /etc/drweb/templates/en/sender_archive.msg
AdminTemplate = /etc/drweb/templates/en/admin_archive.msg
RcptsTemplate =
[ErrorNotifications]
SenderNotify = yes
AdminNotify = yes
RcptsNotify = no
SenderTemplate = /etc/drweb/templates/en/sender_error.msg
AdminTemplate = /etc/drweb/templates/en/admin_error.msg
RcptsTemplate =
[RuleFilterNotifications]
SenderNotify = no
AdminNotify = yes
RcptsNotify = no
SenderTemplate =
AdminTemplate = /etc/drweb/templates/en/admin_rule.msg
RcptsTemplate =
[LicenseLimitNotifications]
AdminNotify = no
AdminTemplate = /etc/drweb/templates/en/admin_license.msg
###################
# Logging section #
###################
[Logging]
# Logging detalization ( Quiet, Errors, Alerts, Info, Verbose, Debug )
Level = Info
# Facility used for logging to syslog ( Daemon, Mail, Local0..7 )
SyslogFacility = Mail
# Priority used for logging to syslog ( Debug, Info, Notice, Alert )
SyslogPriority = Info
################################
# Mail system settings section #
################################
[Mailer]
# Name of the mail system
MailSystem = QMail
# Submission program (used to send notifications) called as
# ${Sendmail} ${SendmailArgs} ${DefaultArgs} -f ${Sender} -- ${Recipients}
# and message has been written to stdin of submission program
Sendmail = /usr/sbin/sendmail
# Additional (to default) arguments for submission program
# Default arguments:
# Qmail: no args
# Exim: -i -bm -oMr drweb_scanned
# Others: -i -bm
# Examples:
# SendmailArgs = "-FUserName"
#
# SendmailArgs = ""
# qmail-queue program path
QmailQueue =
################################
# Mail system settings section #
################################
[Agent]
# Definition of agent's address. Agent is used for collecting statistic
# from mail filters and sending it to stat.drweb.com.
# Note: FAMILY pid is not valid
# Agent should be started before mail filter.
#Address = inet:3003@localhost
# Timeout for the whole session (seconds)
#Timeout = 10

View File

@@ -0,0 +1,16 @@
# Dr.Web (R) Components Monitor meta config file.
# Meta config file describes how a drweb-monitor program
# run applications
Application "DAEMON"
FullName "Dr.Web (R) Daemon"
Path "/opt/drweb/"
Depends "AGENT"
Components
# name args maxStartTime maxStopTime NotifyType UserGroup
drwebd "-a=local:/var/drweb/ipc/.agent --foreground=yes" 60 10 MAIL drweb:drweb
EndComponents
EndApplication

9
etc/drweb/plesk.key Normal file
View File

@@ -0,0 +1,9 @@
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk+pG55MKKKZwNITM6Kx
TzRoLT9F01GYcTYY9byHyI6Uc5I3aq82AFlNPUsgdCW4YHMU7Ej4p+hSV9q2pyCh
L3aJUumIMmi8v0JkPkrR2cSCSGTijBqEO+WeFtskoDY01VOHujzeT3+J3HQ7q22N
3iLMyAgbjm3X0OQmxNRxdGvX49dTGQi427zBHCviXi7RTz2dg3JNfKVwvXXZUmxN
VCZg6THRtK3mAslj7iweKdowHwFRwNVrCEVYnL/0qmt0gVLt43czg597E9m4R50U
cd+7FZF12si06W/Qg8Ld9X862oX/OBywUy1zkjXQ115R03iZ6m6Y800D/OW2GRuF
6wIDAQAB
-----END PUBLIC KEY-----

View File

@@ -0,0 +1,13 @@
server {
listen 127.0.0.1:8443 ssl;
include /etc/sw-cp-server/conf.d/*plesk-drweb-local.ipv6.inc;
ssl_certificate /opt/psa/admin/conf/httpsd.pem;
ssl_certificate_key /opt/psa/admin/conf/httpsd.pem;
ssl_protocols TLSv1 TLSv1.2 TLSv1.3;
ssl_ciphers EECDH+AESGCM+AES128:EECDH+AESGCM+AES256:EECDH+CHACHA20:EDH+AESGCM+AES128:EDH+AESGCM+AES256:EDH+CHACHA20:EECDH+SHA256+AES128:EECDH+SHA384+AES256:EDH+SHA256+AES128:EDH+SHA256+AES256:EECDH+SHA1+AES128:EECDH+SHA1+AES256:EDH+SHA1+AES128:EDH+SHA1+AES256:EECDH+HIGH:EDH+HIGH:AESGCM+AES128:AESGCM+AES256:CHACHA20:SHA256+AES128:SHA256+AES256:SHA1+AES128:SHA1+AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!aECDH:!kDH:@SECLEVEL=0;
include conf.d/*plesk.inc;
include conf.d/*wpb.inc;
}

View File

@@ -0,0 +1 @@
listen [::1]:8443 ssl;

View File

@@ -0,0 +1,6 @@
Dear Administrator,
Your Dr.Web license key file $KEYFILENAME expires in $EXPIRATIONDAYS days
Dr.Web Daemon stops working after license key expiration.
License key number: $KEYNUMBER
License key activates: $KEYACTIVATES
License key expires: $KEYEXPIRES

View File

@@ -0,0 +1,35 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A prohibited archive has been detected
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
The message with the following attributes was not delivered because it contains an object which violates archive restrictions.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Antivirus report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,37 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A message has been cured
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
An infected message with the following attributes was successfully disinfected.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Antivirus report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Antivirus report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,36 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: The antivirus software failure
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
--- Antivirus report ---
The original message was stored in archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,33 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A message has not been checked due to license limitations
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not checked due to license limitations.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
--- Antivirus report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,42 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: MALWARE HAS BEEN DETECTED !
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes has not been delivered because it contains an unwanted object from one of the following classes: adware (advertising software), dialers, joke/hoax,
potentially dangerous software (riskware) or intrusion
tool (hacktool).
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Antivirus report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,40 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: Rule rejected message
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it was rejected by the rule-based filter.
Rejected by rule = $RULE_NAME$
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,40 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A VIRUS HAS BEEN DETECTED !
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an infected object.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Antivirus report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,14 @@
Dear User,
The message sent to you contains an object which violates archive restrictions
and cannot be fully checked by antivirus.
The original message was attached.
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Antivirus report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,14 @@
Dear User,
The message you sent was not delivered because it contains an object which
violates archive restrictions and cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Antivirus report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,10 @@
Dear User,
A message sent to you was not checked by antivirus because antivirus failed to scan it.
The original message was attached.
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
--- Antivirus report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,9 @@
Dear User,
The message you sent was not delivered because antivirus cound not scan it.
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
--- Antivirus report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,26 @@
Dear User,
A message sent to you contains an unwanted object
from one of the following classes: adware (advertising
software), dialers, joke/hoax, potentially dangerous
software (riskware), or intrusion tool (hacktool).
You can save the message to disk and try disinfecting it by
your antivirus software.
The original message was attached.
--- Antivirus report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,21 @@
Dear User,
The message you sent was not delivered because it contains an unwanted object from one of the following classes:
adware (advertising software), dialers, joke/hoax, potentially dangerous software (riskware), or intrusion
tool (hacktool).
Antivirus reports:
--- Antivirus report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,16 @@
Dear User,
The message sent to you was rejected by rule-based filter.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
An original message was storied in archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,19 @@
Dear User,
The message you sent has not been delivered because it
was rejected by rule-based filter.
Antivirus filter reports:
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
An original message was storied in archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,13 @@
Dear User,
The message sent to you contains an object which cannot be checked
by antivirus. The original message was attached.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Relaying such messages is blocked by administrator.
Please contact $POSTMASTER$

View File

@@ -0,0 +1,13 @@
Dear User,
The message you sent was not delivered because it contains an object
that cannot be checked by antivirus filter:
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Relaying such messages is blocked by administrator.
Please contact $POSTMASTER$

View File

@@ -0,0 +1,23 @@
Dear User,
A message sent to you is infected by a virus.
It is very dangerous to open attached files with e-mail readers
(i.e. Outlook). Store the message to disk and try disinfecting it with
your antivirus software.
The original message was attached.
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,18 @@
Dear User,
The message you sent was not delivered because it is infected.
Antivirus filter reports:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,42 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SECURE_RCPTS$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message sent to you by $SENDER$ (may be forged) with the following
attributes was not delivered because it contains an unwanted object
from one of the following classes: adware (advertising software), dialers,
joke/hoax, potentially dangerous software (riskware), or intrusion
tool (hacktool).
--- Antivirus report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record name
given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,40 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SECURE_RCPTS$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message sent to you by $SENDER$ (may be forged) with the following
attributes was not delivered because it contains an infected object.
--- Antivirus report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record name
given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,40 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which violates archive restrictions and cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Antivirus report ---
Please contact $POSTMASTER$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,39 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject:
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
An infected message with the following attributes was successfully disinfected.
Please check your computer for viruses if you sent this message.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Antivirus report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Antivirus report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,38 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
--- Antivirus report ---
Please contact $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,45 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an unwanted object from one of the following classes: adware (advertising software), dialers, joke/hoax, potentially dangerous software (riskware), or intrusion tool (hacktool).
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Antivirus report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,40 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Antivirus report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Antivirus report ---
Please contact $POSTMASTER$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,45 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an infected object.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Antivirus report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Antivirus report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,56 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A prohibited archive has been detected
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
UWAGA!
Wiadomo<EFBFBD><EFBFBD> zawieraj<61>ca wymienione poni<6E>ej atrybuty nie zosta<74>a
dostarczona, poniewa<77> zawiera obiekt naruszaj<61>cy ograniczenia
zwi<EFBFBD>zane z archiwami.
Nadawca = $SENDER$
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Identyfikator wiadomo<6D>ci = $MSGID$
--- Report ---
Szczeg<EFBFBD><EFBFBD>owy raport programu:
$DAEMON_REPORT$
Statystyka testowania:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an object which violates archive restrictions.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,58 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A message has been cured
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Szanowny Administartorze poczty,
wiadomo<EFBFBD><EFBFBD> z nast<73>puj<75>cymi atrybutami by<62>a zainfekowana, ale zosta<74>a wyleczona.
Nadawca = $SENDER$ (may be forged)
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Message-ID = $MSGID$
--- Raport ---
Nat<EFBFBD>puj<EFBFBD>ce wirus(y) zosta<74>y znalezione:
$VIRUS_LIST$
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
Statystyka testu:
$SCAN_STAT$
--- Raport ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
An infected message with the following attributes was successfully disinfected.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,58 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: The antivirus software failure
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
UWAGA!
Wiadomo<EFBFBD><EFBFBD> zawieraj<61>ca wymienione poni<6E>ej atrybuty nie zosta<74>a
dostarczona, poniewa<77> zawiera obiekt, kt<6B>ry nie mo<6D>e by<62>
przetestowany przez program antywirusowy.
Nadawca = $SENDER$
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Identyfikator wiadomo<6D>ci = $MSGID$
--- Report ---
Szczeg<EFBFBD><EFBFBD>owy raport programu:
$DAEMON_REPORT$
--- Report ---
Oryginalna wiadomo<6D><6F> zosta<74>a zapisana pod nazw<7A>:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,50 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A message has not been checked due to license limitations
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Uwaga!
Nadawca = $SENDER$ (dane mog<6F> by<62> sfa<66>szowane)
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
ID wiadomo<6D>ci = $MSGID$
--- Raport ---
Szczeg<EFBFBD><EFBFBD>owy raport programu:
$DAEMON_REPORT$
--- Raport ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not checked
due to license limitations.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,70 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: MALWARE HAS BEEN DETECTED !
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Szanowny Administratorze poczty,
wiadomo<EFBFBD><EFBFBD> z nast<73>puj<75>cymi atrybutami nie zosta<74>a dostarczona,
pozniewa<EFBFBD> zawiera niechciany objekt jednaj z poni<6E>szych klas:
adware (oprogramowanie reklamowe), dialery, joke/hoax,
potencjalnie niebezpieczne oprogramowanie (riskware) lub
narz<EFBFBD>dzia intruz<75>w (hacktool).
Nadawca = $SENDER$ (mo<6D>e byc fa<66>szywy)
Odbiorca = $RCPTS$
Temat = $SUBJECT$
ID-Wiadomo<6D>ci = $MSGID$
--- Raport ---
Poni<EFBFBD>sze niechciane objekt(y) zosta<74>y znalezione:
$VIRUS_LIST$
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
Statystyka testu:
$SCAN_STAT$
--- Raport ---
Oryginalna wiadomo<6D><6F> zosta<74>a zapisana w archiwum nazwa rekordu:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an unwanted object from one of the following classes: adware (advertising software), dialers, joke/hoax,
potentially dangerous software (riskware), or intrusion
tool (hacktool).
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,64 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: Rule rejected message
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Uwaga!
Wiadomo<EFBFBD><EFBFBD> posiadaj<61>ca poni<6E>sze atrybuty nie zosta<74>a dostarczona,
poniewa<EFBFBD> filtr odrzuci<63> j<> na podstawie jednej z regu<67>.
Nadawca = $SENDER$ (dane mog<6F> by<62> sfa<66>szowane)
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
ID wiadomo<6D>ci = $MSGID$
--- Raport ---
Szczeg<EFBFBD><EFBFBD>owy raport programu:
$DAEMON_REPORT$
Statystyka testu:
$SCAN_STAT$
--- Raport ---
Oryginalna wiadomo<6D><6F> zosta<74>a zachowana pod nazw<7A>:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it was rejected by rule-based filter.
Rejected by rule = $RULE_NAME$
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,65 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A VIRUS HAS BEEN DETECTED !
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
UWAGA!
Wiadomo<EFBFBD><EFBFBD> zawieraj<61>ca wymienione poni<6E>ej atrybuty nie zosta<74>a
dostarczona, poniewa<77> zawiera zainfekowany obiekt.
Nadawca = $SENDER$
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Identyfikator wiadomo<6D>ci = $MSGID$
--- Report ---
Wykryto nast<73>puj<75>ce wirusy:
$VIRUS_LIST$
Szczeg<EFBFBD><EFBFBD>owy raport programu:
$DAEMON_REPORT$
Statystyka testowania:
$SCAN_STAT$
--- Report ---
Oryginalna wiadomo<6D><6F> zosta<74>a zapisana pod nazw<7A>:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an infected object.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,13 @@
Dear User,
A message sent to you contains an object which violates archive restrictions
and cannot be fully checked by antivirus.
The original message was attached.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,14 @@
Dear User,
The message that you sent was not delivered because it contains an object which
violates archive restrictions, and cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,11 @@
Dear User,
A message sent to you was not checked by antivirus
because antivirus failed to scan the message.
The original message was attached.
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,9 @@
Dear User,
The message sent by you was not delivered because antivirus failed to scan it.
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,25 @@
Dear User,
A message sent to you contains an unwanted object
from one of the following classes: adware (advertising
software), dialers, joke/hoax, potentially dangerous
software (riskware), or intrusion tool (hacktool).
Save the message to disk and try disinfecting it with your antivirus software.
The original message was attached.
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,22 @@
Dear User,
The message you sent was not delivered because it contains an unwanted object from one of the following classes:
adware (advertising software), dialers, joke/hoax,
potentially dangerous software (riskware), or intrusion
tool (hacktool).
Antivirus filter reports:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,16 @@
Dear User,
A message sent to you was rejected by rule-based filter.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,17 @@
Dear User,
The message you sent was not delivered because it was rejected by rule-based filter.
Antivirus filter reports:
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,13 @@
Dear User,
A message sent to you contains an object which cannot be checked
by antivirus. The original message was attached.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Relaying such messages is blocked by administrator.
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,12 @@
Dear User,
The message you sent was not delivered because it contains an object that cannot be checked by antivirus filter.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Relaying such messages is blocked by administrator.
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,23 @@
Dear User,
A message sent to you is infected by a virus.
It is very dangerous to open attached files with e-mail readers
(i.e. Outlook). Store the message to disk and try disinfecting it with
your antivirus software.
The original message was attached.
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,18 @@
Dear User,
A message that you sent was not delivered because it is infected.
Antivirus filter reports:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,69 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SECURE_RCPTS$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Szanowny U<>ytkowniku,
wiadomo<EFBFBD><EFBFBD> wys<79>ana do ciebie przez $SENDER$ (mo<6D>e by<62> fa<66>szywy) z nast<73>puj<75>cymi
atrybutami nie zosta<74>a dostarczona, poniewa<77> zawiera niechciane objekty
z jednej z nast<73>puj<75>cych klas: adware (oprogramowanie reklamowe), dialery,
joke/hoax, potencjalnie niebezpieczne oprogramowanie (riskware) lub narz<72>dzia
intruz<EFBFBD>w (hacktool).
--- Raport ---
nast<EFBFBD>puj<EFBFBD>ce niechciane objekt(y) zosta<74>y znalezione:
$VIRUS_LIST$
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
Statystyka testu:
$SCAN_STAT$
--- Raport ---
Oryginalna wiadomo<6D><6F> zosta<74>a zapisana w archiwum nazwa rekordu:
$ARCHIVE_RECORD$
W przypadku konieczno<6E>ci otrzymania oryginalnej wiadomo<6D>ci, prosz<73> przes<65>a<EFBFBD>
pro<EFBFBD>b<EFBFBD> do $POSTMASTER$, powo<77>uj<75>c si<73> na nazw<7A> rekordu archiwum podanego wy<77>ej.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message sent to you by $SENDER$ (may be forged) with the following
attributes was not delivered because it contains an unwanted object
from one of the following classes: adware (advertising software), dialers,
joke/hoax, potentially dangerous software (riskware), or intrusion
tool (hacktool).
--- Report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record name
given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,64 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SECURE_RCPTS$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
UWAGA!
Wiadomo<EFBFBD><EFBFBD> wys<79>ana spod adresu $SENDER$ (adres ten mo<6D>e by<62> sfa<66>szowany)
zawieraj<EFBFBD>ca wymienione poni<6E>ej atrybuty nie zosta<74>a dostarczona,
poniewa<EFBFBD> zawiera zainfekowany obiekt.
--- Report ---
Wykryto nast<73>puj<75>ce wirusy:
$VIRUS_LIST$
Szczeg<EFBFBD><EFBFBD>owy raport programu:
$DAEMON_REPORT$
Statystyka testowania:
$SCAN_STAT$
--- Report ---
Oryginalna wiadomo<6D><6F> zosta<74>a zapisana pod nazw<7A>:
$ARCHIVE_RECORD$
Aby otrzyma<6D> oryginaln<6C> wiadomo<6D><6F> nale<6C>y zwr<77>ci<63> si<73> pod adres
$POSTMASTER$, za<7A><61>czaj<61>c wymienion<6F> powy<77>ej nazw<7A>.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes sent to you by $SENDER$ (may be forged) was not delivered because it contains an infected object.
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record name
given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,65 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
UWAGA!
Wiadomo<EFBFBD><EFBFBD> zawieraj<61>ca wymienione poni<6E>ej atrybuty nie zosta<74>a
dostarczona, poniewa<77> zawiera obiekt naruszaj<61>cy ograniczenia
dotycz<EFBFBD>ce archiw<69>w i nie mo<6D>e by<62> przetestowany przy u<>yciu
programu antywirusowego. Administrator zabrania przesy<73>ania
takich wiadomo<6D>ci.
Nadawca = $SENDER$
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Identyfikator wiadomo<6D>ci = $MSGID$
--- Report ---
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
Statystyka testowania:
$SCAN_STAT$
--- Report ---
Prosz<EFBFBD> o kontakt pod adresem $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which violates archive restrictions, and cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Please contact $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,62 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject:
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Szanowny Uzytkowniku,
wiadomo<EFBFBD><EFBFBD> z nast<73>puj<75>cymi atrybutami by<62>a zainfekowana, ale zosta<74>a wyleczona.
Prosz<EFBFBD> sprawdzi<7A> komputer na obecno<6E><6F> wirus<75>w je<6A>li wys<79>a<EFBFBD>e<EFBFBD> t<> wiadomo<6D><6F>.
Nadawca = $SENDER$ (may be forged)
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Message-ID = $MSGID$
Raport filtru antiwirusowego:
--- Raport ---
Nast<EFBFBD>puj<EFBFBD>ce wirus(y) zosta<74>y znalezione:
$VIRUS_LIST$
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
Statystyka testu:
$SCAN_STAT$
--- Raport ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
An infected message with the following attributes was successfully disinfected.
Please check your computer for viruses if you sent this message.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,60 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
UWAGA!
Wiadomo<EFBFBD><EFBFBD> zawieraj<61>ca wymienione poni<6E>ej atrybuty nie zosta<74>a
dostarczona, poniewa<77> zawiera obiekt, kt<6B>ry nie mo<6D>e by<62>
przetestowany przy u<>yciu programu antywirusowego.
Administrator zabrania przesy<73>ania takich wiadomo<6D>ci.
Nadawca = $SENDER$
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Identyfikator wiadomo<6D>ci = $MSGID$
--- Report ---
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
--- Report ---
Prosz<EFBFBD> o kontakt pod adresem $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
Please contact $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,79 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Szanowny U<>ytkowniku,
wiadomo<EFBFBD><EFBFBD> z nast<73>puj<75>cymi atrybutami nie zosta<74>a dostarczona,
poniewa<EFBFBD> zawiera niechciane objekty z jednej z nast<73>puj<75>cych
klas: adware (oprogramowanie reklamowe), dialery, joke/hoax,
potencjalnie niebezpieczne oprogramowanie (riskware) lub narz<72>dzia
intruz<EFBFBD>w (hacktool).
Nadawca = $SENDER$ (mo<6D>e by<62> fa<66>szywy)
Odbiorca = $RCPTS$
Temat = $SUBJECT$
ID-Wiadomo<6D>ci = $MSGID$
Raport filtru antywirusowego:
--- Raport ---
Poni<EFBFBD>sze niechciane objekt(y) zosta<74>y znalezione:
$VIRUS_LIST$
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
Statystyka testu:
$SCAN_STAT$
--- Raport ---
Oryginalna wiadomo<6D><6F> zosta<74>a zapisana w archiwum nazwa rekordu:
$ARCHIVE_RECORD$
W przypadku konieczno<6E>ci otrzymania oryginalnej wiadomo<6D>ci, prosz<73> przes<65>a<EFBFBD>
pro<EFBFBD>b<EFBFBD> do $POSTMASTER$, powo<77>uj<75>c si<73> na archiwum nazwa rekordu podana powy<77>ej.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an unwanted object from one of the following classes: adware (advertising software), dialers, joke/hoax,
potentially dangerous software (riskware), or intrusion
tool (hacktool).
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,64 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
UWAGA!
Wiadomo<EFBFBD><EFBFBD> zawieraj<61>ca wymienione poni<6E>ej atrybuty nie zosta<74>a
dostarczona, poniewa<77> zawiera obiekt, kt<6B>ry nie mo<6D>e by<62>
przetestowany przy u<>yciu programu antywirusowego.
Administrator zabrania przesy<73>ania takich wiadomo<6D>ci.
Nadawca = $SENDER$
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Identyfikator wiadomo<6D>ci = $MSGID$
--- Report ---
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
Statystyka testowania:
$SCAN_STAT$
--- Report ---
Prosz<EFBFBD> o kontakt pod adresem $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Please contact $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,74 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
UWAGA!
Wiadomo<EFBFBD><EFBFBD> zawieraj<61>ca wymienione poni<6E>ej atrybuty nie zosta<74>a
dostarczona, poniewa<77> zawiera zainfekowany obiekt.
Nadawca = $SENDER$
Odbiorcy = $RCPTS$
Temat = $SUBJECT$
Identyfikator wiadomo<6D>ci = $MSGID$
--- Report ---
Wykryto nast<73>puj<75>ce wirusy:
$VIRUS_LIST$
Szczeg<EFBFBD><EFBFBD>owy raport:
$DAEMON_REPORT$
Statystyka testowania:
$SCAN_STAT$
--- Report ---
Oryginalna wiadomo<6D><6F> zosta<74>a zapisana pod nazw<7A>:
$ARCHIVE_RECORD$
Aby otrzyma<6D> oryginaln<6C> wiadomo<6D><6F> nale<6C>y zwr<77>ci<63> si<73> pod adres
$POSTMASTER$, za<7A><61>czaj<61>c wymienion<6F> powy<77>ej nazw<7A>.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an infected object.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,55 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A prohibited archive has been detected
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SENDER$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SUBJECT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $MSGID$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an object which violates archive restrictions.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,58 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A message has been cured
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SENDER$ (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SUBJECT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $MSGID$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD>(<28>):
$VIRUS_LIST$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was successfully disinfected.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,57 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: The antivirus software failure
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SENDER$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SUBJECT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $MSGID$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,51 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A message has not been checked due to license limitations
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><>-<2D><>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SENDER$ (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SUBJECT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $MSGID$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not checked due to license limitations.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,71 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: MALWARE HAS BEEN DETECTED !
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD>
<EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><>
(adware), <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (dialer), <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>-<2D><><EFBFBD><EFBFBD><EFBFBD>
(joke/hoax), <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> (riskware) <20><><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (hacktools).
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SENDER$ (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SUBJECT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $MSGID$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>):
$VIRUS_LIST$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an unwanted object from one of the following classes: adware (advertising software), dialers, joke/hoax,
potentially dangerous software (riskware), or intrusion
tool (hacktool).
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,62 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: Rule rejected message
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SENDER$ (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SUBJECT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $MSGID$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it was rejected by rule-based filter.
Rejected by rule = $RULE_NAME$
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,64 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: "System Administrator" $POSTMASTER$
Subject: A virus has been detected!
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SENDER$ (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $SUBJECT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> = $MSGID$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD>(<28>):
$VIRUS_LIST$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
A message with the following attributes was not delivered because it contains an infected object.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,14 @@
Dear User,
The message sent to you contains an object which violates archive restrictions
and cannot be fully checked by antivirus.
The original message was attached.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,13 @@
Dear User,
A message you sent was not delivered because it contains an object which
violates archive restrictions and cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,11 @@
Dear User,
A message sent to you was not checked by antivirus
because antivirus failed to scan it.
The original message was attached.
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,10 @@
Dear User,
The message sent by you was not delivered.
Antivirus filter failed to scan this message.
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
Please contact $POSTMASTER$.

View File

@@ -0,0 +1,27 @@
Dear User,
ATTENTION!!!
A message sent to you contains an unwanted object
from one of the following classes: adware (advertising
software), dialers, joke/hoax, potentially dangerous
software (riskware), or intrusion tool (hacktool).
Store the message to disk and try disinfecting it by
your antivirus software.
The original message was attached.
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,22 @@
Dear User,
The message you sent was not delivered because it contains an unwanted object from one of the following classes:
adware (advertising software), dialers, joke/hoax,
potentially dangerous software (riskware), or intrusion
tool (hacktool).
Antivirus filter reports:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,16 @@
Dear User,
The message sent to you was rejected by rule-based filter.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
An original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,17 @@
Dear User,
The message you sent has not been delivered because it was rejected by rule-based filter.
Antivirus filter reports:
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
An original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,13 @@
Dear User,
The message sent to you contains an object which cannot be checked
by antivirus. The original message was attached.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistic:
$SCAN_STAT$
--- Report ---
Relaying such messages is blocked by administrator.
Please contact $POSTMASTER$

View File

@@ -0,0 +1,12 @@
Dear User,
The message you sent was not delivered because it contains an object that cannot be checked by antivirus filter.
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Relaying such messages is blocked by administrator.
Please contact $POSTMASTER$

View File

@@ -0,0 +1,24 @@
Dear User,
ATTENTION!!!
The message sent to you is infected by a virus.
It is very DANGEROUS to open attached file by e-mail readers
(i.e. Outlook). Store message to disk and try disinfecting them by
your antivirus software.
The original message was attached.
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
An original message was stored in archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,18 @@
Dear User,
The message you sent is infected and was not delivered.
Antivirus filter reports:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
An original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.

View File

@@ -0,0 +1,71 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SECURE_RCPTS$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $SENDER$ (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD>
<EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><>
(adware), <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (dialer), <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>-<2D><><EFBFBD><EFBFBD><EFBFBD>
(joke/hoax), <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> (riskware) <20><><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (hacktools).
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>):
$VIRUS_LIST$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$ARCHIVE_RECORD$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $POSTMASTER$, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD>, <20><><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD>.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes, sent to you by $SENDER$ (may be forged), was not delivered because it contains an unwanted object from one of the following classes: adware (advertising software), dialers,
joke/hoax, potentially dangerous software (riskware), or intrusion
tool (hacktool).
--- Report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record name
given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,64 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SECURE_RCPTS$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $SENDER$ (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD>(<28>):
$VIRUS_LIST$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$ARCHIVE_RECORD$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $POSTMASTER$, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD>, <20><><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD>.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes, sent to you by $SENDER$ (may be forged), was not delivered because it contains an infected object.
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record name
given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,60 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28><>) $RCPTS$
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><> <20><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $POSTMASTER$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which violates archive restrictions, and cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Please contact $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,58 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject:
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $SENDER$ !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>) <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28><>) $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>. <20><><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$VIRUS_LIST$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was successfully disinfected.
Please check your computer for viruses if you sent this message.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,57 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28><>) $RCPTS$
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $POSTMASTER$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
Detailed report:
$DAEMON_REPORT$
--- Report ---
Please contact $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,75 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $SENDER$ !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>) <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28><>) $RCPTS$
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> (adware), <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (dialer),
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>-<2D><><EFBFBD><EFBFBD><EFBFBD> (joke/hoax), <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> (riskware)
<EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (hacktools).
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD>(<28>):
$VIRUS_LIST$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$ARCHIVE_RECORD$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $POSTMASTER$, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD>, <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an unwanted object from one of the following classes: adware (advertising software), dialers, joke/hoax,
potentially dangerous software (riskware), or intrusion
tool (hacktool).
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
The following unwanted objects were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send request to
$POSTMASTER$, referring to the archive record
name given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,63 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28><>) $RCPTS$
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>).
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $POSTMASTER$
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an object which cannot be checked by antivirus filter.
Relaying such messages is blocked by administrator.
Sender = $SENDER$
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
Please contact $POSTMASTER$.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

View File

@@ -0,0 +1,72 @@
From: "DrWeb-DAEMON" $FILTER_MAIL$
To: $SENDER$
Subject: Undelivered mail: $SUBJECT$
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $SENDER$ !
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (<28><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>) <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28><>) $RCPTS$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28>) <20><><EFBFBD><EFBFBD><EFBFBD>(<28>):
$VIRUS_LIST$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>:
$DAEMON_REPORT$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$SCAN_STAT$
--- Report ---
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:
$ARCHIVE_RECORD$
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> $POSTMASTER$, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD>, <20><><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear User,
A message with the following attributes was not delivered because it contains an infected object.
Sender = $SENDER$ (may be forged)
Recipients = $RCPTS$
Subject = $SUBJECT$
Message-ID = $MSGID$
Antivirus filter report:
--- Report ---
The following viruses were found:
$VIRUS_LIST$
Detailed report:
$DAEMON_REPORT$
Scanning statistics:
$SCAN_STAT$
--- Report ---
The original message was stored in an archive record named:
$ARCHIVE_RECORD$
In order to receive the original message, please send a request to
$POSTMASTER$, referring to the archive record
name given above.
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
$FULLHEADERS$
--001-DrWeb-MailFilter-Notification--

3
etc/drweb/users.conf Normal file
View File

@@ -0,0 +1,3 @@
[version=2]
allow any subst @

67
etc/drweb/viruses.conf Normal file
View File

@@ -0,0 +1,67 @@
#
# Viruses list for DrWeb Mail Filters
#
# The file with the list of unnotificable viruses allows to blocks notifying
# to specified person (sender, recipients or admin) depending on virus name.
#
#
# Format of file:
# ---------------
# Line beginning with # - it's a comments
# Empty lines are acceptable
#
# Version 1 (default):
# <admin> <sender> <rcpts> <virus_re>
# where
# <admin>, <sender>, <rcpts> - bool values (allow/deny) that defines should
# filter send notify to administrator, Envelope-From or Envelope-To
# <virus_re> - the virus matching string, that interpretted as POSIX regular
# expression, should be in quotes if contains spaces
# (case insensitive)
#
# Version 2:
# <admin> <sender> <rcpts> <quarantine> <virus_re>
# where <admin>, <sender>, <rcpts> and <virus_re> see above
# <quarantine> - the bool value (allow/deny) that defines should filter
# move message to quarantine or shouldn't
#
# NOTE: You cannot use both versions together
#
# Version 1 translate to Version 2 rule
# version=1
# <admin> <sender> <rcpts> <virus_re>
# version=2
# <admin> <sender> <rcpts> allow <virus_re>
#
#[version=1]
# ------|--------|-------|----------------
# admin | sender | rctps | matching string
# ------|--------|-------|----------------
# allow deny deny "Otchet\.26628"
# allow deny deny "Canapa\.58075"
# allow deny deny "Klez"
# allow deny deny "Frethem"
# allow deny deny "Bugbear"
# allow deny deny "Yaha"
# allow deny deny "Generic\.95"
# allow deny deny "Seoul"
# allow deny deny "Reteras"
# allow deny deny "Avril"
#
[version=2]
# ------|--------|-------|------------|----------------
# admin | sender | rctps | quarantine | matching string
# ------|--------|-------|------------|----------------
allow deny deny deny "VBS\.Generic\.95"
allow deny deny deny "VBS\.Generic\.348"
allow deny deny deny "Win32\.Klez"
allow deny deny deny "Win32\.Hazafi"
allow deny allow allow "Win32\.Funlove"
allow deny allow allow "Win32\.Valhala"
allow deny allow allow "Win32\.Dumaru"
allow deny deny deny "Win32\.Mail"
allow deny deny deny "Win32\.HLLM"