Getting email alerts

[akertis]

Is it possible to get an email alert when a trojan or other malware is found in an email. Right now the user will get an email but I have no idea that they are getting this email. Is it possible for me to also get this email? I get email alerts about backup and mail server usage.

Thanks!

[ewilen]

Please put your zimbra version in your profile.

With ZCS 5 and 6 I've been getting such alerts--all mailed to the admin account. Are you checking that account? Are you sure you don't have a filter configured?

Here's what I get (sans delivery headers and with recipient address obfuscated)

This is a multi-part message in MIME format...

------------=_1275642713-27154-0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

A virus was found: Trojan.Generic.Bredolab.3232

Scanner detecting a virus: ClamAV-clamd

Content type: Virus
Internal reference code for the message is 27154-03/XpFXn4p6Rn+T

First upstream SMTP client IP address: [217.92.184.44]
  pd95cb82c.dip0.t-ipconnect.de
According to a 'Received:' trace, the message apparently originated at:
  [217.92.184.44], 217.92.184.44

Return-Path: <winchingrb88@roulotte-keryel.com>
From: "Elmer Albright" <winchingrb88@roulotte-keryel.com>
Message-ID: <000d01cb03c5$d21d0930$6400a8c0@winchingrb88>
Subject: Your new labour contract
The message has been quarantined as: virus-XpFXn4p6Rn+T

Notification to sender will not be mailed.

The message WAS NOT relayed to:
<xxxx@mprinc.com>:
   250 2.7.0 Ok, discarded, id=27154-03 - INFECTED: Trojan.Generic.Bredolab.3232

Virus scanner output:
  p002: Trojan.Generic.Bredolab.3232 FOUND
  p004: Trojan.Generic.Bredolab.3232 FOUND


------------=_1275642713-27154-0
Content-Type: text/rfc822-headers; name="header"
Content-Disposition: inline; filename="header"
Content-Transfer-Encoding: 7bit
Content-Description: Message header section

Return-Path: <winchingrb88@roulotte-keryel.com>
Received: from pd95cb82c.dip0.t-ipconnect.de (pd95cb82c.dip0.t-ipconnect.de [217.92.184.44])
	by zimbra.mprinc.com (Postfix) with ESMTP id 291713658802
	for <xxxx@mprinc.com>; Fri,  4 Jun 2010 02:11:51 -0700 (PDT)
Received: from 217.92.184.44 by mail.roulotte-keryel.com; Fri, 4 Jun 2010 11:10:47 +0100
Message-ID: <000d01cb03c5$d21d0930$6400a8c0@winchingrb88>
From: "Elmer Albright" <winchingrb88@roulotte-keryel.com>
To: <xxxx@mprinc.com>
Subject: Your new labour contract
Date: Fri, 4 Jun 2010 11:10:47 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----=_NextPart_000_0006_01CB03C5.D21D0930"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 4.71.1712.3
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1712.3

------------=_1275642713-27154-0--

[it75@co.starke.in.us]

is there a way to turn off this alert?

i am getting flooded with email that says there was a virus but it was removed, i understand that this can be a good feature but 100 - 500 emails a day about viruses since i have to check the account is a little nuts.