MailScanner does not notify virus senders

[iso-8859-1] José Angel Blanco González jose at TREELOGIC.COM
Wed Jan 12 16:19:31 GMT 2005


    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Doing that you are supporting viruses, because almost all virus have faked 
addresses. It´s better not to do that

----- Original Message ----- 
From: "Roel Schouten" <rs at FORTCONSULT.NET>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, January 12, 2005 5:00 PM
Subject: MailScanner does not notify virus senders


> Hello,
>
> My installation of MailScanner does not notify senders of viruses even
> though I told it to do so.
> Otherwise my installation works fine (it both filters spam & virus).
>
> I use MailScanner 4.37.7 on a RedHat Enterprise 3 running kernel 2.4.21-27
> with PostFix 2.0.16 as MTA.
> Moreover, I use ClamAV 0.80 and SpamAssassin 3.0.2
>
> I use the following settings in /etc/MailScanner/MailScanner.conf (I only
> included the ones, I believe to be relevant):
>
> Run As User = postfix
> Run As Group = postfix
> Incoming Queue Dir = /var/spool/postfix/hold
> Outgoing Queue Dir = /var/spool/postfix/incoming
> MTA = postfix
> Sendmail = /usr/sbin/sendmail
> Virus Scanners = clamavmodule
> Quarantine Infections = no
> Quarantine Silent Viruses = no
> Notify Senders = yes
> Notify Senders Of Viruses = yes
>
> To test the virus scanning functionality, I use the EICAR test virus.
> The log does not show any errors:
> Jan 12 16:46:35 mail MailScanner[15031]: New Batch: Scanning 1 messages, 
> 719
> bytes
> Jan 12 16:46:36 mail MailScanner[15031]: Virus and Content Scanning: 
> Starting
> Jan 12 16:46:36 mail MailScanner[15031]: ClamAVModule::INFECTED::
> Eicar-Test-Signature:: ./2A34F581F5.4AD7B/msg-15031-1.txt
> Jan 12 16:46:36 mail MailScanner[15031]: Virus Scanning: ClamAV Module 
> found
> 1 infections
> Jan 12 16:46:36 mail MailScanner[15031]: Infected message 2A34F581F5.4AD7B
> came from 127.0.0.1
> Jan 12 16:46:36 mail MailScanner[15031]: Virus Scanning: Found 1 viruses
>
>
> MailScanner is able to send notifications to the system administrator by
> setting "Send Notices = yes", so that works.
> It also possible to use /usr/sbin/sendmail (Postfix' version of it) to 
> send
> mails to external addresses from the command line.
>
> Any clue? Thanks!
>
> Roel Schouten.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list