MailScanner Quarantine

[icanectc]

Whats the FASTEST way to clear the quarantine items?? I noticed this is piling up pretty darn fast... when I rm it will ask me for each and every one of them.. Is there a just do it command??? So that i dont have to keep marking y y y y y each time??

[Damian]

Include

-f

with the command and it will force the removal without prompting for each file.

So, if you are in the right directory you can issue

rm -f *.*

and it will delete every file within that directory.

Always excercise caution when using -f as you can't undo what it does.

[icanectc]

Great thanks!

[Rubas]

MailScanner.conf

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = no

[chirpy]

Or, you can run the CRON job that comes with MailScanner. If you have the layer1 installation:

cp /usr/mailscanner/bin/cron/clean.quarantine.cron /etc/cron.daily/.

Then edit the file in /etc/cron.daily/ and set:
$disabled = 0;
$days_to_keep = 30; # set to the number of days you want to keep

[icanectc]

Nice Chirpy I like that one!!

Although I do not have a BIN directory in MailScanner.

[chirpy]

Although I do not have a BIN directory in MailScanner

I can only guess that you're not using the layer1 distribution. Anyway, here's the contents of the file, put it into a file in /etc/cron.daily and then chmod +x the file

#!/usr/bin/perl
#
# IMPORTANT NOTE:
#
# Change the next line to 0 instead of 1 to enable this script.
# By default it will be disabled and will not do anything.
#

$disabled = 1;
$quarantine_dir = '/var/spool/MailScanner/quarantine';
$days_to_keep   = 30;

exit if $disabled;

# Standardise the format of the directory name
die 'Path for quarantine_dir must be absolute' unless $quarantine_dir =~ /^\//;
$quarantine_dir =~ s/\/$//; # Delete trailing slash

# Now get the content list for the directory.
opendir(QDIR, $quarantine_dir) or die "Couldn't read directory $quarantine_dir";

# Loop through this list looking for any *directory* which hasn't been
# modified in the last $days_to_keep days.
# Unfortunately this will do nothing if the filesystem is backed up using tar.
while($entry = readdir(QDIR)) {	
	next if $entry =~ /^\./;
	$entry = $quarantine_dir . '/' . $entry;
	system("rm -rf $entry") if -d $entry &&
	                           -M $entry > $days_to_keep;
}
closedir(QDIR);

[icanectc]

That worked thanks a bunch chirpy. You rock!

[icanectc]

Actually if you dont install the one from layer1 as I did. The file clean.quarantine is already located for us in /etc/cron.daily. Although you must enable it it comes disabled by default.

Just an FYI out their.

[spaceman]

Include

-f

with the command and it will force the removal without prompting for each file.

So, if you are in the right directory you can issue

rm -f *.*

and it will delete every file within that directory.

Always excercise caution when using -f as you can't undo what it does.

If you're in /var/spool/MailScanner/quarantine/ you'll need to use rm -Rf *, and not rm -f *.*, because inside /quarantine are lots of non-empty directories which won't be touched by rm -f *.*. AND YES - MAKE F'ING SURE YOU'RE IN /var/spool/MailScanner/quarantine/ before running rm -Rf * OR ELSE EVERYTHING (directories, sub directories, files, etc.) IS GOING TO BE DELETED (NO 'ARE YOU SURE', NO 'RECYCLE BIN')!!!