[Esd-l] VOTE: adding duplicate notification suppression

John D. Hardin jhardin at impsec.org
Fri Jun 14 07:14:45 PDT 2002


On Fri, 14 Jun 2002, Daniel Marois wrote:

> I would personally like to have a choice.

Well, yes, of course you'd either be able to turn it on or turn it
off.

> I did have a case last year where a corrupt procmail.log in a user
> directory prevented infected messages to be quarantined. As it is
> working now, if I see 20 emails in quarantine and I receive 20
> warnings, I know that I got them all. This is how usually do a
> quick check, just make sure that the number of quarantine match
> the warnings.

The way I'm thinking is it would also suppress duplicate quarantines.

> Another idea would be to put the number of suppressed warning in
> the "master" warning message, that way we would be able to make a
> match with the number of quarantined messages.

The only warning delivered would be the first. The subsequent messages
would log something like "Message-ID already processed, suppressing
duplicate." - you could count those in the log file.

Perhaps *that* would be the notification.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
 "To disable the Internet to save EMI and Disney is the moral
  equivalent of burning down the library of Alexandria to ensure the
  livelihood of monastic scribes."
                                    -- John Ippolito of the Guggenheim
-----------------------------------------------------------------------
   343 days until The Matrix Reloaded



More information about the esd-l mailing list