Hi Gabe, I am not sure the script is clean enough to post to the list, (It seems like this is one of those tools that only gets worked on in a crises) but I would be happy to share to you directly or to anyone who asks. Enjoy, John On 3/4/2015 6:20 AM, Forster, Gabriel wrote: > John, > > That script would likely be very helpful to many. Can it be put up on github, posted to the list or similar? Otherwise, I would sure appreciate it myself. > > Thanks, > Gabe > > ________________________________________ > From: info-cyrus-bounces+gabriel.forster=searshc.com@xxxxxxxxxxxxxxxxxxxx [info-cyrus-bounces+gabriel.forster=searshc.com@xxxxxxxxxxxxxxxxxxxx] on behalf of Sebastian Hagedorn [Hagedorn@xxxxxxxxxxxx] > Sent: Wednesday, March 04, 2015 7:06 AM > To: John Wade > Cc: info-cyrus@xxxxxxxxxxxxxxxxxxxx > Subject: Re: deleting emails directly > > --On 4. März 2015 05:33:44 -0600 John Wade<jwade@xxxxxxxxxx> wrote: > >> The tool we wrote for phishing scans the Cyrus imap server's imap spool >> file systems looking for a specific text string in specific user's >> mailboxes in recent messages. Te search can be done either recursively >> or just the inbox. It then looks for and replaces another specific >> text string (usually the phishing URL) with a string, like "Phishing URL >> removed by the Information Technology department". > Strictly speaking you would have to change the message's UID or the > mailbox's UIDVALIDITY as well. Messages are guaranteed to be immutable by > RFC 3501, section 2.3.1.1. > -- > .:.Sebastian Hagedorn - Weyertal 121 (Gebäude 133), Zimmer 2.02.:. > .:.Regionales Rechenzentrum (RRZK).:. > .:.Universität zu Köln / Cologne University - ✆ +49-221-470-89578.:. > > This message, including any attachments, is the property of Sears Holdings Corporation and/or one of its subsidiaries. It is confidential and may contain proprietary or legally privileged information. If you are not the intended recipient, please delete it without reading the contents. Thank you. ---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
