MailScanner Notify

[Alex Neuman van der Hans]

That should only be done for internal users, and only for certain types 
of viruses - otherwise you'll be backscattering.
If someone wanted to bug one of your users, they would send EICAR 
1,000,000 times to your server. Your user would then receive 1,000,000 
messages saying "the file eicar.com was blocked as a virus".

On 3/21/2011 8:20 AM, Danilo Marques de Gouveia wrote:
> Hi Gleen, thanks for your help.
>
> I understood what Silent Viruses and Still Delivery Silent Viruses 
> means and that is correct, the MailScanner can't delivery the Messages 
> with virus, but it should take the virus out and send a notification 
> to the user saying "The file example.xls was blocked as a virus, if 
> you still want to receive that message, please call the helpdesk"
>
> reading the configs the option that allow this is:
>
> # Do you want to deliver messages once they have been cleaned of any
> # viruses?
> # By making this a ruleset, you can re-create the "Deliver From Local"
> # facility of previous versions.
> Deliver Cleaned Messages = yes
>
> but when a message with a virus arrives, the MailScanner sends out 
> only the Notification to the System administrator:
> This is a piece of my mail.log
>
> Mar 21 10:12:01 mike MailScanner[10045]: Spam Checks: Starting
> Mar 21 10:12:01 mike postfix/pickup[10084]: D8F09281514: uid=103 
> from=<danilo.marques at curriculum.com.br 
> <mailto:danilo.marques at curriculum.com.br>>
> Mar 21 10:12:01 mike postfix/cleanup[10087]: D8F09281514: hold: header 
> Received: by mx.quake.com.br <http://mx.quake.com.br> (Postfix, from 
> userid 103)??id D8F09281514; Mon, 21 Mar 2011 10:12:01 -0300 (BRT) 
> from local; from=<danilo.marques at curriculum.com.br 
> <mailto:danilo.marques at curriculum.com.br>>
>
> Any ideas?
>
> Cheers,
> On Fri, Mar 18, 2011 at 6:38 PM, Glenn Steen <glenn.steen at gmail.com 
> <mailto:glenn.steen at gmail.com>> wrote:
>
>     On 18 March 2011 22:03, Danilo Marques de Gouveia
>     <dm.gouveia at gmail.com <mailto:dm.gouveia at gmail.com>> wrote:
>     > Hi guys,
>     > MailScanner do not advice the recipient that a virus was found
>     and archive
>     > only, can anyone help me?
>     (snip)
>     > Silent Viruses = HTML-IFrame All-Viruses
>     (snip)
>     > Still Deliver Silent Viruses = no
>     (snip)
>     Look at the docs for these, understand the ramificaions, then... if
>     you still want this, do some informed changes.
>     The docs are in the comments just above each setting in
>     MailScanner.conf, also in a nice way on www.mailscanner.info
>     <http://www.mailscanner.info> (in the
>     cocs, there is a HTMLified list of all settings in MailScanner.info)
>     and I'm sure the MailScanner book (available on the website) touch on
>     this as well (although it's been a while since I read it last:).
>
>     Cheers
>     --
>     -- Glenn
>     email: glenn < dot > steen < at > gmail < dot > com
>     work: glenn < dot > steen < at > ap1 < dot > se
>     --
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>     Before posting, read http://wiki.mailscanner.info/posting
>
>     Support MailScanner development - buy the book off the website!
>
>
>
>
> -- 
> Danilo Marques de Gouveia

-- 
--

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110321/764a7bd9/attachment.html