MailScanner does not notify virus senders

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Is your "Silent Viruses" set to "All-Viruses" by any chance? If so it
won't reply to viruses.
99.9% of all viruses now fake the sender's address, so if you reply to
them I can guarantee that you will *not* be replying to the owner of the
infected PC but some poor innocent 3rd party who is nothing to do with it.

Please DON'T do this, it gives MailScanner a very bad name and I end up
having to waste my time replying to all these innocent people explaining
why someone's faulty setup caused them to get a notification that is
nothing to do with them.

Roel Schouten wrote:

>Hello,
>
>My installation of MailScanner does not notify senders of viruses even
>though I told it to do so.
>Otherwise my installation works fine (it both filters spam & virus).
>
>I use MailScanner 4.37.7 on a RedHat Enterprise 3 running kernel 2.4.21-27
>with PostFix 2.0.16 as MTA.
>Moreover, I use ClamAV 0.80 and SpamAssassin 3.0.2
>
>I use the following settings in /etc/MailScanner/MailScanner.conf (I only
>included the ones, I believe to be relevant):
>
>Run As User = postfix
>Run As Group = postfix
>Incoming Queue Dir = /var/spool/postfix/hold
>Outgoing Queue Dir = /var/spool/postfix/incoming
>MTA = postfix
>Sendmail = /usr/sbin/sendmail
>Virus Scanners = clamavmodule
>Quarantine Infections = no
>Quarantine Silent Viruses = no
>Notify Senders = yes
>Notify Senders Of Viruses = yes
>
>To test the virus scanning functionality, I use the EICAR test virus.
>The log does not show any errors:
>Jan 12 16:46:35 mail MailScanner[15031]: New Batch: Scanning 1 messages, 719
>bytes
>Jan 12 16:46:36 mail MailScanner[15031]: Virus and Content Scanning: Starting
>Jan 12 16:46:36 mail MailScanner[15031]: ClamAVModule::INFECTED::
>Eicar-Test-Signature:: ./2A34F581F5.4AD7B/msg-15031-1.txt
>Jan 12 16:46:36 mail MailScanner[15031]: Virus Scanning: ClamAV Module found
>1 infections
>Jan 12 16:46:36 mail MailScanner[15031]: Infected message 2A34F581F5.4AD7B
>came from 127.0.0.1
>Jan 12 16:46:36 mail MailScanner[15031]: Virus Scanning: Found 1 viruses
>
>
>MailScanner is able to send notifications to the system administrator by
>setting "Send Notices = yes", so that works.
>It also possible to use /usr/sbin/sendmail (Postfix' version of it) to send
>mails to external addresses from the command line.
>
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!