Hi guys,<div><br></div><div>MailScanner do not advice the recipient that a virus was found and archive only, can anyone help me?</div><div><br></div><div>Versions;</div><div><div>Postfix<span class="Apple-tab-span" style="white-space:pre"> </span> 2.7.1</div>
<div>Postgrey 1.32</div><div>MailScanner 4.79.11</div><div>MailWatch 1.0.5</div><div>clamAV 0.96.5</div><div>SpamAssassin 3.003.001</div></div><div><br></div><div><br></div><div>MailScanner Config</div>
<div><br></div><div><div>%etc-dir% = /etc/MailScanner</div><div>%mcp-dir% = /etc/MailScanner/mcp</div><div>%org-long-name% = Test.inc </div><div>%org-name% = test </div><div>%report-dir% = /etc/MailScanner/reports/pt_br</div>
<div>%rules-dir% = /etc/MailScanner/rules</div><div>%web-site% = <a href="http://www.test.com">www.test.com</a></div><div>Add Envelope From Header = yes</div><div>Add Envelope To Header = no</div><div>Add Text Of Doc = no</div>
<div>Add Watermark = yes</div><div>Allow External Message Bodies = no</div><div>Allow File MIME Types =</div><div>Allow Filenames =</div><div>Allow Filetypes =</div><div>Allow Form Tags = yes #disarm</div><div>Allow IFrame Tags = yes #disarm</div>
<div>Allow Multiple HTML Signatures = no</div><div>Allow Object Codebase Tags = yes</div><div>Allow Partial Messages = no</div><div>Allow Password-Protected Archives = no</div><div>Allow Script Tags = yes #disarm</div><div>
Allow WebBugs = yes #disarm</div><div>Allowed Sophos Error Messages =</div><div>Also Find Numeric Phishing = yes</div><div>Always Include MCP Report = no</div><div>Always Include SpamAssassin Report = no</div><div>Always Looked Up Last = &MailWatchLogging </div>
<div>Always Looked Up Last After Batch = no</div><div>Antiword = /usr/bin/antiword -f</div><div>Antiword Timeout = 50</div><div>Archive Mail = /var/spool/MailScanner/archive</div><div>Archives Are = zip ole #rar</div><div>
Archives: Allow File MIME Types =</div><div>Archives: Allow Filenames =</div><div>Archives: Allow Filetypes =</div><div>Archives: Deny File MIME Types =</div><div>Archives: Deny Filenames = #\.com$ \.exe$ \.bat$ \.asc$</div>
<div>Archives: Deny Filetypes =</div><div>Archives: Filename Rules = %etc-dir%/archives.filename.rules.conf</div><div>Archives: Filetype Rules = %etc-dir%/archives.filetype.rules.conf</div><div>Attach Image To HTML Message Only = yes</div>
<div>Attach Image To Signature = yes #no</div><div>Attachment Encoding Charset = ISO-8859-1</div><div>Attachment Extensions Not To Zip = .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml</div><div>Attachment Warning Filename = %org-name%-Attachment-Warning.txt</div>
<div>Attachments Min Total Size To Zip = 100k</div><div>Attachments Zip Filename = MessageAttachments.zip</div><div>Automatic Syntax Check = yes</div><div>Block Encrypted Messages = no</div><div>Block Unencrypted Messages = no</div>
<div>Bounce MCP As Attachment = no</div><div>Bounce Spam As Attachment = no</div><div>Cache SpamAssassin Results = yes</div><div>Check Filenames In Password-Protected Archives = no #yes</div><div>Check SpamAssassin If On Spam List = yes</div>
<div>Check Watermarks To Skip Spam Checks = yes</div><div>Check Watermarks With No Sender = yes</div><div>ClamAV Full Message Scan = no #yes</div><div>ClamAVmodule Maximum Compression Ratio = 250</div><div>ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes)</div>
<div>ClamAVmodule Maximum Files = 1000</div><div>ClamAVmodule Maximum Recursion Level = 8</div><div>Clamd Lock File = /var/run/clamav/clamd.pid</div><div>Clamd Socket = /var/run/clamav/clamd.ctl</div><div>Clamd Use Threads = yes </div>
<div>Clean Header Value = Found to be clean</div><div>Content Modify Subject = start</div><div>Content Subject Text = [Conteudo Suspeito] #{Dangerous Content?}</div><div>Convert Dangerous HTML To Text = no</div><div>
Convert HTML To Text = no</div><div>Country Sub-Domains List = %etc-dir%/country.domains.conf</div><div>Custom Functions Dir = /etc/MailScanner/CustomFunctions</div><div>Custom Spam Scanner Timeout = 20</div><div>Custom Spam Scanner Timeout History = 20</div>
<div>Dangerous Content Scanning = yes</div><div>Debug = no</div><div>Debug SpamAssassin = no</div><div>Definite MCP Is High Scoring = no</div><div>Definite Spam Is High Scoring = no</div><div>Deleted Bad Content Message Report = %report-dir%/deleted.content.message.txt</div>
<div>Deleted Bad Filename Message Report = %report-dir%/deleted.filename.message.txt</div><div>Deleted Size Message Report = %report-dir%/deleted.size.message.txt</div><div>Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt</div>
<div>Deliver Cleaned Messages = yes</div><div>Deliver Disinfected Files = no</div><div>Deliver In Background = yes</div><div>Deliver Unparsable TNEF = yes #no</div><div>Delivery Method = batch</div><div>Deny File MIME Types =</div>
<div>Deny Filenames = #\.com$ \.exe$ \.bat$ \.asc$</div><div>Deny Filetypes =</div><div>Detailed MCP Report = yes</div><div>Detailed Spam Report = yes</div><div>Disarmed Modify Subject = start</div><div>Disarmed Subject Text = [HTML Desativado] #{Disarmed}</div>
<div>Disinfected Header Value = Disinfected</div><div>Disinfected Report = %report-dir%/disinfected.report.txt</div><div>Dont Sign HTML If Headers Exist = # In-Reply-To: References:</div><div>Enable Spam Bounce = %rules-dir%/bounce.rules</div>
<div>Envelope From Header = X-%org-name%-MailScanner-From:</div><div>Envelope To Header = X-%org-name%-MailScanner-To:</div><div>Expand TNEF = no </div><div>File Command = /usr/bin/file</div><div>File Timeout = 20</div><div>
Filename Modify Subject = start</div><div>Filename Rules = %etc-dir%/filename.rules.conf</div><div>Filename Subject Text = [Anexo Suspeito]</div><div>Filetype Rules = %etc-dir%/filetype.rules.conf</div><div>Find Archives By Content = yes</div>
<div>Find Phishing Fraud = yes</div><div>Find UU-Encoded Files = no</div><div>First Check = spam</div><div>Fpscand Port = 10200</div><div>Gunzip Command = /bin/gunzip</div><div>Gunzip Timeout = 50</div><div>Hide Incoming Work Dir = yes</div>
<div>Hide Incoming Work Dir in Notices = no</div><div>High Scoring MCP Actions = deliver</div><div>High Scoring MCP Modify Subject = start</div><div>High Scoring MCP Subject Text = {MCP?}</div><div>High Scoring Spam Actions = store notify</div>
<div>High Scoring Spam Modify Subject = no #start</div><div>High Scoring Spam Subject Text = {Spam?}</div><div>High SpamAssassin Score = 10</div><div>Highlight Phishing Fraud = yes</div><div>Hostname = MailScanner #the %org-name% ($HOSTNAME) MailScanner</div>
<div>ID Header = X-%org-name%-MailScanner-ID:</div><div>Ignore Spam Whitelist If Recipients Exceed = 20</div><div>Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap shim</div><div>Include Binary Attachments In SpamAssassin = no</div>
<div>Include Scanner Name In Reports = yes</div><div>Include Scores In MCP Report = no</div><div>Include Scores In SpamAssassin Report = yes</div><div>Incoming Queue Dir = /var/spool/postfix/hold</div><div>Incoming Work Dir = /var/spool/MailScanner/incoming</div>
<div>Incoming Work Group = clamav</div><div>Incoming Work Permissions = 0640</div><div>Incoming Work User =</div><div>Infected Header Value = Found to be infected</div><div>Information Header Value = Please contact the ISP for more information</div>
<div>Inline HTML Signature = %report-dir%/inline.sig.html</div><div>Inline HTML Warning = %report-dir%/inline.warning.html</div><div>Inline Text Signature = %report-dir%/inline.sig.txt</div><div>Inline Text Warning = %report-dir%/inline.warning.txt</div>
<div>IP Protocol Version Header = # X-%org-name%-MailScanner-IP-Protocol:</div><div>Is Definitely MCP = no</div><div>Is Definitely Not MCP = no</div><div>Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules</div><div>
Is Definitely Spam = no</div><div>Keep Spam And MCP Archive Clean = no</div><div>Known Web Bug Servers = <a href="http://msgtag.com">msgtag.com</a></div><div>Language Strings = %report-dir%/languages.conf</div><div>Local Postmaster = postmaster </div>
<div>Lock Type = </div><div>Lockfile Dir = /var/lock/subsys/MailScanner</div><div>Log Dangerous HTML Tags = no</div><div>Log Delivery And Non-Delivery = no</div><div>Log MCP = no</div><div>Log Non Spam = no</div><div>Log Permitted File MIME Types = no</div>
<div>Log Permitted Filenames = no</div><div>Log Permitted Filetypes = no</div><div>Log Silent Viruses = no</div><div>Log Spam = yes #no</div><div>Log SpamAssassin Rule Actions = yes</div><div>Log Speed = yes #no</div><div>
Mail Header = X-%org-name%-MailScanner:</div><div>MailScanner Version Number = 4.79.11</div><div>Mark Infected Messages = yes</div><div>Mark Unscanned Messages = no #yes</div><div>Max Children = 5 </div><div>Max Custom Spam Scanner Size = 20k</div>
<div>Max Custom Spam Scanner Timeouts = 10</div><div>Max Normal Queue Size = 800</div><div>Max Spam Check Size = 200k</div><div>Max Spam List Timeouts = 7</div><div>Max SpamAssassin Size = 80k continue 120k</div><div>Max SpamAssassin Timeouts = 5 </div>
<div>Max Unsafe Bytes Per Scan = 50m</div><div>Max Unsafe Messages Per Scan = 30</div><div>Max Unscanned Bytes Per Scan = 100m</div><div>Max Unscanned Messages Per Scan = 30</div><div>Maximum Archive Depth = 0 </div><div>
Maximum Attachment Size = -1</div><div>Maximum Attachments Per Message = 50</div><div>Maximum Message Size = %rules-dir%/max.message.size.rules</div><div>Maximum Processing Attempts = 3 </div><div>MCP Actions = deliver</div>
<div>MCP Checks = no</div><div>MCP Error Score = 1</div><div>MCP Header = X-%org-name%-MailScanner-MCPCheck:</div><div>MCP High SpamAssassin Score = 10</div><div>MCP Max SpamAssassin Size = 100k</div><div>MCP Max SpamAssassin Timeouts = 20</div>
<div>MCP Modify Subject = start</div><div>MCP Required SpamAssassin Score = 1</div><div>MCP SpamAssassin Default Rules Dir = %mcp-dir%</div><div>MCP SpamAssassin Install Prefix = %mcp-dir%</div><div>MCP SpamAssassin Local Rules Dir = %mcp-dir%</div>
<div>MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf</div><div>MCP SpamAssassin Timeout = 10</div><div>MCP SpamAssassin User State Dir =</div><div>MCP Subject Text = {MCP?}</div><div>Minimum Attachment Size = -1</div>
<div>Minimum Code Status = supported</div><div>Minimum Stars If On Spam List = 0</div><div>Missing Mail Archive Is = directory</div><div>Monitors for ClamAV Updates = /usr/local/share/clamav/*.cld /usr/local/share/clamav/*.cvd</div>
<div>Monitors For Sophos Updates = /opt/sophos-av/lib/sav/*.ide</div><div>MTA = postfix</div><div>Multiple Headers = append</div><div>Never Notify Senders Of Precedence = list bulk</div><div>Non MCP Actions = deliver</div>
<div>Non Spam Actions = deliver #header "X-Spam-Status: No"</div><div>Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar</div><div>Notice Signature = -- \nMailScanner\nEmail Virus Scanner\<a href="http://nwww.mailscanner.info">nwww.mailscanner.info</a></div>
<div>Notices From = MailScanner</div><div>Notices Include Full Headers = no #yes</div><div>Notices To = <a href="mailto:root@test.com">root@test.com</a></div><div>Notify Senders = no</div><div>Notify Senders Of Blocked Filenames Or Filetypes = no #yes</div>
<div>Notify Senders Of Blocked Size Attachments = no </div><div>Notify Senders Of Other Blocked Content = yes</div><div>Notify Senders Of Viruses = no</div><div>Outgoing Queue Dir = /var/spool/postfix/incoming</div><div>Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf</div>
<div>Phishing Modify Subject = start #no</div><div>Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf</div><div>Phishing Subject Text = [Phishing] #{Fraud?}</div><div>PID file = /var/run/MailScanner/MailScanner.pid</div>
<div>Place New Headers At Top Of Message = no</div><div>Processing Attempts Database = /var/spool/MailScanner/incoming/Processing.db</div><div>Quarantine Dir = /var/spool/MailScanner/quarantine</div><div>Quarantine Group =</div>
<div>Quarantine Infections = yes</div><div>Quarantine Modified Body = no</div><div>Quarantine Permissions = 0600</div><div>Quarantine Silent Viruses = no</div><div>Quarantine User =</div><div>Quarantine Whole Message = no</div>
<div>Quarantine Whole Messages As Queue Files = no</div><div>Queue Scan Interval = 2 </div><div>Read IP Address From Received Header = no</div><div>Rebuild Bayes Every = 0</div><div>Recipient MCP Report = %report-dir%/recipient.mcp.report.txt</div>
<div>Reject Message = no</div><div>Rejection Report = %report-dir%/rejection.report.txt</div><div>Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2:</div><div>Required SpamAssassin Score = 5</div><div>Restart Every = 7600</div>
<div>Run As Group = postfix</div><div>Run As User = postfix</div><div>Run In Foreground = no</div><div>Scan Messages = yes</div><div>Scanned Modify Subject = no # end</div><div>Scanned Subject Text = {Scanned}</div><div>Send Notices = yes</div>
<div>Sender Bad Filename Report = %report-dir%/sender.filename.report.txt</div><div>Sender Content Report = %report-dir%/sender.content.report.txt</div><div>Sender Error Report = %report-dir%/sender.error.report.txt</div>
<div>Sender MCP Report = %report-dir%/sender.mcp.report.txt</div><div>Sender Size Report = %report-dir%/sender.size.report.txt</div><div>Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt</div><div>
Sender Spam Report = %report-dir%/sender.spam.report.txt</div><div>Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt</div><div>Sender Virus Report = %report-dir%/sender.virus.report.txt</div>
<div>Sign Clean Messages = no #yes</div><div>Sign Messages Already Processed = no</div><div>Signature Image <img> Filename = signature.jpg</div><div>Signature Image Filename = %report-dir%/sig.jpg</div><div>Silent Viruses = HTML-IFrame All-Viruses</div>
<div>Size Modify Subject = no #start</div><div>Size Subject Text = {Size}</div><div>Sophos IDE Dir = /opt/sophos-av/lib/sav</div><div>Sophos Lib Dir = /opt/sophos-av/lib</div><div>Spam Actions = deliver #header "X-Spam-Status: Yes"</div>
<div>Spam Checks = yes</div><div>Spam Domain List =</div><div>Spam Header = X-%org-name%-MailScanner-SpamCheck:</div><div>Spam List =</div><div>Spam List Definitions = %etc-dir%/spam.lists.conf</div><div>Spam List Timeout = 5 </div>
<div>Spam List Timeouts History = 10</div><div>Spam Lists To Be Spam = 1</div><div>Spam Lists To Reach High Score = 3</div><div>Spam Modify Subject = start</div><div>Spam Score = no #yes</div><div>Spam Score Character = s</div>
<div>Spam Score Header = X-%org-name%-MailScanner-SpamScore:</div><div>Spam Score Number Format = %d</div><div>Spam Subject Text = [SPAM] #{Spam?}</div><div>SpamAssassin Auto Whitelist = yes</div><div>SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db</div>
<div>SpamAssassin Cache Timings = 1800,300,10800,172800,600</div><div>SpamAssassin Default Rules Dir =</div><div>SpamAssassin Install Prefix =</div><div>SpamAssassin Local Rules Dir =</div><div>SpamAssassin Local State Dir = # /var/lib/spamassassin</div>
<div>SpamAssassin Rule Actions =</div><div>SpamAssassin Site Rules Dir = /etc/mail/spamassassin</div><div>SpamAssassin Temporary Dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp</div><div>SpamAssassin Timeout = 35 #75</div>
<div>SpamAssassin Timeouts History = 30</div><div>SpamAssassin User State Dir = /var/lib/MailScanner</div><div>SpamScore Number Instead Of Stars = no</div><div>Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:</div>
<div>Split Exim Spool = no</div><div>Still Deliver Silent Viruses = no</div><div>Stored Bad Content Message Report = %report-dir%/stored.content.message.txt</div><div>Stored Bad Filename Message Report = %report-dir%/stored.filename.message.txt</div>
<div>Stored Size Message Report = %report-dir%/stored.size.message.txt</div><div>Stored Virus Message Report = %report-dir%/stored.virus.message.txt</div><div>Syslog Facility = mail</div><div>Syslog Socket Type =</div>
<div>TNEF Expander = /usr/bin/tnef --maxsize=100000000</div><div>TNEF Timeout = 120</div><div>Treat Invalid Watermarks With No Sender as Spam = nothing</div><div>Unpack Microsoft Documents = yes #off</div><div>Unrar Command = /usr/bin/unrar</div>
<div>Unrar Timeout = 50</div><div>Unscanned Header Value = Not scanned #: please contact your Internet E-Mail Service Provider for details</div><div>Unzip Filenames = *.txt *.ini *.log *.csv</div><div>Unzip Maximum File Size = 50k</div>
<div>Unzip Maximum Files Per Archive = 10 </div><div>Unzip MimeType = text/plain</div><div>Use Custom Spam Scanner = no</div><div>Use Default Rules With Multiple Recipients = no</div><div>Use SpamAssassin = yes</div><div>
Use Stricter Phishing Net = yes</div><div>Use TNEF Contents = no #replace</div><div>Use Watermarking = no</div><div>Virus Modify Subject = start</div><div>Virus Names Which Are Spam = Sane*UNOFFICIAL HTML/* *Phish*</div><div>
Virus Scanner Definitions = %etc-dir%/virus.scanners.conf</div><div>Virus Scanner Timeout = 30</div><div>Virus Scanners = clamav </div><div>Virus Scanning = yes</div><div>Virus Subject Text = [Virus]</div><div>Wait During Bayes Rebuild = no</div>
<div>Warning Is Attachment = yes</div><div>Watermark Header = X-%org-name%-MailScanner-Watermark:</div><div>Watermark Lifetime = 604800</div><div>Watermark Secret = %org-name%-Secret</div><div>Web Bug Replacement = <a href="http://www.mailscanner.tv/1x1spacer.gif">http://www.mailscanner.tv/1x1spacer.gif</a></div>
<div>Zip Attachments = no</div></div><div>-- <br>Danilo Marques de Gouveia<br>
</div>