MailScanner Notify

[Danilo Marques de Gouveia]

Guys,

I realized that if I use eicar instead of clamAV test-files the
notifications works just fine (I didn't change the silent viruses settings,
but I think it shows that if I change the silent viruses settings even with
clamav test-files I would receive the notification), however I did a bulk
test and my email test got tons of notifications, so I'm gonna do what you
are saying, will disable that notification and keep an eye in MailWatch.

Thanks all,
On Mon, Mar 21, 2011 at 2:03 PM, Glenn Steen <glenn.steen at gmail.com> wrote:

> Try excluding a virus detection pattern from the silent viruses setting
> (that is: don't have the pseudo-pattern all-viruses there) and then send a
> virus through... You'll notice the difference;-)
>
> As Alex says, take care with this... A far better option is to use some
> form of auxiliary system (like mailwatch) that can send a quarantine report
> ... That way, regardless of volume, you at most send one infomail/timeperiod
> (usually once/day)/recipient.
>
> Cheers
>
> Den 21 mar 2011 14.25, "Danilo Marques de Gouveia" <dm.gouveia at gmail.com>
> skrev:
>
>
> Hi Gleen, thanks for your help.
>
> I understood what Silent Viruses and Still Delivery Silent Viruses means
> and that is correct, the MailScanner can't delivery the Messages with virus,
> but it should take the virus out and send a notification to the user saying
> "The file example.xls was blocked as a virus, if you still want to receive
> that message, please call the helpdesk"
>
> reading the configs the option that allow this is:
>
> # Do you want to deliver messages once they have been cleaned of any
> # viruses?
> # By making this a ruleset, you can re-create the "Deliver From Local"
> # facility of previous versions.
> Deliver Cleaned Messages = yes
>
> but when a message with a virus arrives, the MailScanner sends out only the
> Notification to the System administrator:
> This is a piece of my mail.log
>
> Mar 21 10:12:01 mike MailScanner[10045]: Spam Checks: Starting
> Mar 21 10:12:01 mike postfix/pickup[10084]: D8F09281514: uid=103 from=<
> danilo.marques at curriculum.com.br>
> Mar 21 10:12:01 mike postfix/cleanup[10087]: D8F09281514: hold: header
> Received: by mx.quake.com.br (Postfix, from userid 103)??id D8F09281514;
> Mon, 21 Mar 2011 10:12:01 -0300 (BRT) from local; from=<
> danilo.marques at curriculum.com.br>
>
> Any ideas?
>
> Cheers,
>
>
> On Fri, Mar 18, 2011 at 6:38 PM, Glenn Steen <glenn.steen at gmail.com>
> wrote:
>
>> >
>> > On 18 March 2011 22:03, Danilo Marques de Gouveia <dm.gouveia at gmail.com>
>> wrote:
>> > > Hi guys,
>> > >...
>> --
>>
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
>
> --
> Danilo Marques de Gouveia
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>


-- 
Danilo Marques de Gouveia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110321/f7cd168b/attachment.html