Virus Infected Message Notifications

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Ricky Boone wrote:
> This may seem like a _really_ stupid question, but I'll ask anyways.  ;)
>
> I cannot seem to get messages that are "infected" (eicar) to notify
> the recipient of the infected message.
This is usually down to the setting of "Silent Viruses". By default this 
contains "All-Viruses" which stops recipient notifications of viruses. 
Just remove this value and "service MailScanner reload" and you should 
find recipients start getting notified.
>   Messages with bad
> filenames/filetypes, phishing, etc. notify the user without a problem
> ({Filename?}, {Disarm?}, etc.).  But if a message has an infection,
> _nothing_ gets to the recipient.  Notices, however, to the "local
> postmaster" go through just fine.
>
> I've gone over my config a dozen times now, and I cannot figure out
> what is causing the message to be dropped altogether.  None of the
> config items that stand out seem to make any difference ("Silent
> Viruses", "Still Deliver Silent Viruses", various "Action" directives,
> etc.).  Comparing the MailScanner.conf file doesn't show anything out
> of the ordinary either, with the exception of the "Virus Scanning"
> directive, which is set to a rule (for Mailwatch purposes).
>
> I can provide my MailScanner.conf file, however I would prefer it was
> not posted to this list, so it would be sent off-list (if requested).
>
> Any ideas?
>   

Jules

- -- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.8.0 (Build 2158)
Comment: (pgp-secured)
Charset: ISO-8859-1

wj8DBQFHxESPEfZZRxQVtlQRAo5TAKDKF6uxwNAwJPGOLC3CVSQnG5i8UQCfdnFx
vdHQR0SleEvAjmo96ezmrJU=
=YN7X
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.