[jira] [Closed] (JAMES-4113) Allow audit of virus decisions

     [ https://issues.apache.org/jira/browse/JAMES-4113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Benoit Tellier closed JAMES-4113.
---------------------------------
    Resolution: Fixed

> Allow audit of virus decisions
> ------------------------------
>
>                 Key: JAMES-4113
>                 URL: https://issues.apache.org/jira/browse/JAMES-4113
>             Project: James Server
>          Issue Type: Improvement
>          Components: Mailet Contributions, rspamd
>            Reporter: Benoit Tellier
>            Priority: Major
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> h3. Description of the bug
> On a prod platform I have virus detected and placed aside. Cool, it WORKS!
> The issue is that hardly know **why** it is there is the first place. And I can't justify that decision if its eventually needed.
> {code:java}
> {
>   "name": "Mail1718267393124-47b34e1f-a767-472f-b0e3-0c6d593a8394",
>   "sender": "[email protected]",
>   "recipients": [
>     "[email protected]"
>   ],
>   "error": null,
>   "state": "virus",
>   "remoteHost": "3.mo552.mail-out.ovh.net",
>   "remoteAddr": "178.33.254.192",
>   "lastUpdated": "2024-06-13T08:29:53.216+0000",
>   "attributes": null,
>   "perRecipientsHeaders": null,
>   "headers": null,
>   "textBody": null,
>   "htmlBody": null,
>   "messageSize": null
> }
> {code}
> h3. The fix
> I would expect the `error` of the mail to discluse the exact symbol from RSPAMD and all the relevant information on the class of VIrus...
>  - An admin reviewing logs would then know it in the AuditLog
>  - An admin browsing repository would be able to see the error too



--
This message was sent by Atlassian Jira
(v8.20.10#820010)