Notifying Recipients of Blocked Messages

[Kaplan, Andrew H.]

Hi there --

I modified the following line in MailScanner.conf in order to notify the
recpients that 
bad content was detected in their e-mails:

Still Deliver Silent Viruses = yes

and restarted MailScanner, ClamAV, and Sendmail on the system in question. The
administrator
did receive a notification that bad content was detected in a user's email. But
when I queried 
the recipient to see if he had received notification, he claimed he did not.
What else should
I modify to have the recipients notified when bad content is detected in their
e-mails? Thanks.



-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of Julian
Field
Sent: Wednesday, June 21, 2006 3:51 PM
To: MailScanner discussion
Subject: Re: Notifying Recipients of Blocked Messages


You've got it about right. All viruses these days are messages which  
are 100% virus data and no useful information at all. So there's  
little point in notifying users of stuff they never asked for nor  
wanted in the first place.

Doesn't matter, is the answer to your first question.

On Wed21 Jun 06, at 20:15, Kaplan, Andrew H. wrote:

> Hi there --
>
> I am going through the MailScanner.conf file to locate the recipient
> notification configuration, and came across several areas:
>
> 	# Set how to invoke MTA when sending messages MailScanner has created
> 	# (e.g. to sender/recipient saying "found a virus in your message")
> 	# This can also be the filename of a ruleset.
> 	Sendmail = /usr/lib/sendmail
>
> The /usr/lib/sendmail is a link to /usr/sbin/sendmail. Would it be  
> better to
> have the line in question point directly to the latter? Also, would  
> changing
> it as such enable the recipient to receive the above notification?
>
> 	# Still deliver (after cleaning) messages that contained viruses 	
>       # listed in the above option ("Silent Viruses") to the  
> recipient?
> 	# Setting this to "yes" is good when you are testing everything, and
> 	# because it shows management that MailScanner is protecting them,
> 	# but it is bad because they have to filter/delete all the incoming
> # virus warnings.
> 	#
> 	# Note: Once you have deployed this into "production" use, you should
> # Note: set this option to "no" so you don't bombard thousands of
> 	# Note: people with useless messages they don't want!
> 	#
> 	# This can also be the filename of a ruleset.
> 	Still Deliver Silent Viruses = no
>
> If I change the value from no to yes, will that activate  
> notification of the
> recipient of a virus in their e-mail?
>
> If these aren't the areas where recipient notification is  
> configured, can
> someone point out the section in question? Thanks.
>
>
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of  
> Steve Campbell
> Sent: Tuesday, June 20, 2006 5:10 PM
> To: MailScanner discussion
> Subject: Re: Notifying Recipients of Blocked Messages
>
> Andrew,
>
> ----- Original Message -----
> From: "Kaplan, Andrew H." <AHKAPLAN at partners.org>
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Sent: Tuesday, June 20, 2006 4:35 PM
> Subject: RE: Notifying Recipients of Blocked Messages
>
>
>> At the risk of sounding like a complete idiot, what is the line(s) in
>> question
>> in the MailScanner.conf file? Sorry...
>
> That was my point, but a general one, at that. Some options in some  
> config
> files don't seem to indicate what they are used for. But in this  
> case, I
> think you'll find it pretty easily.
>
> Actually, you should scan the Mailscanner.conf file and read the  
> paragraph
> above each config option. You might even scan the file for "Notify"  
> to see
> all of the different options.
>
> If you haven't read the conf file from beginning to end, you're  
> missing a
> lot of ideas you could be doing with MS. You won't remember them  
> all or what
> they do, but at least you'll be slightly familiar.
>
> Don't worry about ever sounding like a complete idiot on this list,  
> as we
> have all done that here on this list at one time or another. And  
> most of us
> have ask the same kind of config questions before also. Remember,  
> the only
> stupid question is the one you never ask, or how ever that goes.
>
> Steve
>>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of  
>> Steve
>> Campbell
>> Sent: Tuesday, June 20, 2006 2:12 PM
>> To: MailScanner discussion
>> Subject: Re: Notifying Recipients of Blocked Messages
>>
>>
>> ----- Original Message -----
>> From: "Michele Neylon :: Blacknight.ie" <michele at blacknight.ie>
>> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
>> Sent: Tuesday, June 20, 2006 1:39 PM
>> Subject: Re: Notifying Recipients of Blocked Messages
>>
>>
>>> Kaplan, Andrew H. wrote:
>>>> Hi there -
>>>>
>>>>
>>>>
>>>> How do I determine if recipients of blocked messages are being  
>>>> notified,
>>>
>>> Check your mail logs
>>>
>>>> and how would I configure MailScanner to do that? Thanks.
>>>
>>> It's the default setting in MailScanner.conf, so unless you  
>>> changed it
>>> you shouldn't have to do anything
>>>
>> If you don't know what to change, how do you know if you changed  
>> it or
>> not?
>>
>> Steve
>>
>>>
>>> -- 
>>> Mr Michele Neylon
>>> Blacknight Solutions
>>> Quality Business Hosting & Colocation
>>> http://www.blacknight.ie/
>>> Tel. 1850 927 280
>>> Intl. +353 (0) 59  9183072
>>> Direct Dial: +353 (0)59 9183090
>>> Fax. +353 (0) 59  9164239
>>> -- 
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>
>>
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!