Re: [AMaViS-user] Amavis finetuning, what need to set, if spam and virus checks should disabled? And what tagged Levels?

This is a discussion on Re: [AMaViS-user] Amavis finetuning, what need to set, if spam and virus checks should disabled? And what tagged Levels? within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; Marcel, > I have installed amavis with mysql lookups and all works fine. > I see the lookup_sql's in ...


Go Back   Usenet Forums > Anti-Spam and Anti-Virus Related Forums > Amavis User

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-04-2005
Mark Martinec
 
Posts: n/a
Default Re: [AMaViS-user] Amavis finetuning, what need to set, if spam and virus checks should disabled? And what tagged Levels?

Marcel,

> I have installed amavis with mysql lookups and all works fine.
> I see the lookup_sql's in amavislog and the rules are ok.
> The Example is very complex, if i look in the policy Table.
> There are predefined Rules, like non-paying, normal, etc.


Just examples, you do not need most of these.

> Now my question: Whitch parameters i must set to a Mailbox Or Domain, to
> activate / deactivate SPAM and viruschecks?
>
> Is it enough to say that the adress is a SPAM and VIRUS Lover To deactivate
> the checks? Or should i set the bypass parameters for them too?


Normally both the bypass* and the corresponding *_lovers are set
to the same value, i.e. both true or both false.

For better understanding see the first two sections in:
http://www.ijs.si/software/amavisd/a...-new-docs.html

> And in my amavisd.conf i don't understand this parameters:
>
> $final_virus_destiny = D_DISCARD;
> $final_banned_destiny = D_BOUNCE;
> $final_spam_destiny = D_PASS;
> $final_bad_header_destiny = D_PASS;
>
> Whitch config i must use, to get all mails in.


Set them all to D_PASS if you want all malware to pass.

> I won't bounce Mails to
> users, whitch was faket by spammers.


Use D_DISCARD instead of D_BOUNCE if you do not want bounces nor delivery.

Even if D_BOUNCE is used, there are some further safeguards to prevent
or reduce backscatter:

- the D_BOUNCE is converted to D_DISCARD for viruses that are faking
sender names (matching @viruses_that_fake_sender_maps). That would
be all viruses when @viruses_that_fake_sender_maps is left at its
default value, so $final_virus_destiny=D_BOUNCE and
$final_virus_destiny=D_DISCARD are equivalent in this case;

- the D_BOUNCE is converted to D_DISCARD for spam which exceeds
the $sa_dsn_cutoff_level

> I will have that Levels to 5 are spam, and if the level is greater than 7
> he should delete the spam. I will secure Values.
> So whats the best config for doin'g this?


$final_spam_destiny = D_BOUNCE;
$sa_tag2_level_deflt = 5; # add 'spam detected' headers at that level
$sa_kill_level_deflt = 7; # block spam at that level or above
$sa_dsn_cutoff_level = 10; # spam level beyond which a DSN is not sent

> In my testings witch the mySQL DB lookups, i see that if i set The policy
> to non_paying(he should do no checks!) and send a virustestfile, he take
> the mail In a attachement and give me a warning hint from the virusadmin.


If bypass* is true, the corresponding check should normally not
be done, unless its result was cached from a recent test on the same
message body. Check the log to see if this was the case, or is it
just that the chosen policy corresponding to recipient was not
the non-paying one - again, check the log to find out, increase
the log level if necessary.

> So i don't wan't to have warnmails! Whether the admin nore the customers
> should become Warnmails, how to disable it? I set there to 0:
> $virus_admin = undef;
> Why i become the warnmails?


> $virus_admin = undef;
> Why i become the warnmails?


Indeed turning off $virus_admin should do the trick.

$virus_admin = undef; # disable virus administrator notifications
# see also: $newvirus_admin, $spam_admin, $banned_admin, $bad_header_admin

Could it be that you have a policy.virus_admin in SQL table not NULL,
in which case a fallback to $virus_admin would never happen, as SQL
lookup overrides the static settings. Check the logs to find out.

> $mailfrom_notify_admin = undef;
> $mailfrom_notify_recip = undef;
> $mailfrom_notify_spamadmin = undef;


Don't do this, it has no effect on turning off notifications,

Mark


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 01:21 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0