Not quietly deleting (version 3.21-1)
John Goggan
jgoggan at DCG.COM
Fri Jun 28 13:16:42 IST 2002
Just to note, I appear to be getting this same behavior. I am also running
3.21 and using f-protect. And, I am fairly certain that it was working
properly before I upgraded, although I guess I am not absolutely positive.
I double-checked that F-Prot was detecting them as "W32/Klez.H at mm" -- and that
is what I have in my ignore file.
Basically, people that email Klez to me (although they really didn't, of
course, since Klez fakes the from and that's why we want to ignore them) are
still getting emailed back that they sent a virus our way.
(Note that someone else answered you and said that Julian already explained
this and that it is working properly -- I disagree. You said that you're
still getting email notifications BESIDES postmaster -- which means that they
aren't being deleted quietly/properly. I think he missed that. Unless I'm
misunderstanding something...)
- John...
Declan Grady wrote:
> I upgraded to version 3.21-1 using the rpm, and modified the config
> files. In mailscanner.conf, I have selected the option to quietly
> delete viruses:
>
> Viruses To Quietly Delete = /usr/local/MailScanner/etc/viruses.to.delete.conf
>
> As I am using f-prot (from frisk) I have modified the viruses.to.delete.conf file as suggested:
> i.e. I commented the Sophos lines, and uncommented the f-prot lines:
>
> # For F-Prot
> W32/Klez.H at mm
> W32/Klez.H
>
> However, today I got an email with the W32/Klez.H at mm ; Mailscanner notified me as postmaster, but still delivered the mail to me, marked as {VIRUS} and with the attachment removed.
>
> I assume I have amde some config error, but what I want is to quietly delete this without informing anyone except postmaster.
>
> Is this possible ? What options should I look at in the .conf file ?
>
> Thanks for the continued great development work Julian.
> I am very happy with mailscanner.
>
> Best Regards
> Declan
>
> --
> Declan Grady
>
> Nuvotem
> Crolly, Letterkenny, Co. Donegal, Ireland.
> http://www.nuvotem.com
More information about the MailScanner
mailing list