Re: [AMaViS-user] amavis quarantine

This is a discussion on Re: [AMaViS-user] amavis quarantine within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; Andres wrote: > Hi all ;) > I have been using postfix-amavis one year and I am pretty happy with ...


Go Back   Usenet Forums > Anti-Spam and Anti-Virus Related Forums > Amavis User

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-16-2007
Gary V
 
Posts: n/a
Default Re: [AMaViS-user] amavis quarantine

Andres wrote:

> Hi all ;)


> I have been using postfix-amavis one year and I am pretty happy with them.
> I have this setup on a 50-user file:


> $virus_quarantine_to = "virus-quarantine\@$mydomain";


> (I download every week the messages contained in that email address
> with no problem.)


> Today an email was quarantined because it had an .exe file, I checked
> the virus-quarantine mailbox trying to find it with no results, so I
> remembered that the message said:


> The message has been quarantined as:
> /var/lib/amavis/quarantine


> So I ssh the server and went to /var/lib/amavis/ but the "quarantine"
> directory is just a file and, apparently, it grew to 180Mb since
> install.


> Why do I have two different quarantines ? Can I access the last one? How?


> Thanks guys!


This was a bug in some early versions of amavisd-new on Debian.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350917

I suggest changing:
$QUARANTINEDIR = "$MYHOME/quarantine";
to
$QUARANTINEDIR = "$MYHOME/virusmails";

(this may place some quarantined items in the virusmails directory).

and possibly setting:
$banned_quarantine_to = "virus-quarantine\@$mydomain";
(or other appropriate mailbox)

Do you have a POP3 server running on this machine? If not, you could
possibly install qpopper, add a user called 'quarantine':
adduser quarantine
then:
cp /var/lib/amavis/quarantine /var/mail

Then retrieve the mail via pop3.

Then you could possibly remove qpopper if this is only a relay
server and there is no local mail storage.

If this is the case and you wish to remove qpopper, make sure it's the
only thing that will be removed by 'simulating' removing it first:
apt-get -s remove qpopper

Gary V



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 09:55 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0