Re: [AMaViS-user] warnvirusrecip problem

I solved my problem...
I wanted to ask one more thing:

about the policy_bank

$policy_bank{'ORIGINATING'} = { # mail supposedly originating from our
users
originating => 1, # declare that mail was submitted by our smtp client
allow_disclaimers => 1, # enables disclaimer insertion if available
# notify administrator of locally originating malware
virus_admin_maps => ["virusalert\@$mydomain"],
spam_admin_maps => ["virusalert\@$mydomain"],
warnbadhsender => 1,
# forward to a smtpd service providing DKIM signing service
forward_method => 'smtp:[127.0.0.1]:10027',
# force MTA conversion to 7-bit (e.g. before DKIM signing)
smtpd_discard_ehlo_keywords => ['8BITMIME'],
bypass_banned_checks_maps => [1], # allow sending any file names and
types
terminate_dsn_on_notify_success => 0, # don't remove NOTIFY=SUCCESS
option
};

I do not have any DKIM mail server wither I do not have
amavisd-new listening on port 10027

is this Stanza ignored ?

Also lookign at documentation I did not understand how to
implement a white list for mail originating inside my network

thanks

Rick


On Wed, 1 Aug 2007, RJ45 wrote:

>
> Hello,
> I set amavisd-new version 2.5.2 to warn users who receive mails.
> viruses are detected and mails goes into quarantine /var/virusmails.
>
> the problem is that users are never warned they received a virus message
> and that message was quarantined.
>
> this because the mail originating from virusalert@mydomain.com
> is re-processed by amavis again thru the milter mechanism and so
> the user is never warned.
> Looks like the warning message from virusalert includes the original
> message which contain virus itself.
>
> actually I use this notify_method whne a virus is found
>
> $notify_method = 'pipe:flags=q argv=/usr/sbin/sendmail -Ac -i -odd -f
> ${sender} -- ${recipient}';
>
> but this mail sent is intercepted again by amavis and is discarded so it
> nevers reach the final user:
>
> Aug 1 18:47:56 iris amavis[11332]: (l71Glqed011524) SEND via PIPE:
> <virusalert@mydomain> -> <Riccardo.Veraldi@mydomain>
> Aug 1 18:47:56 iris amavis[11332]: (l71Glqed011524) Blocked INFECTED
> (W32/Sober-C), AM.CL [131.154.3.18] <Riccardo.Veraldi@mydomain> ->
> <Riccardo.Veraldi@mydomain>, quarantine: virus-hgCljucRmKhz, Message-ID:
> <46B0B930.1010707@mydomain>, mail_id: hgCljucRmKhz, Hits: -, size: 101863,
> 2883 ms
> Aug 1 18:47:56 iris amavis[11332]: (l71Glqed011524) mail checking ended:
> version_server=2\nsetreply=250 2.7.0
> Ok,%20discarded,%20id=l71Glqed011524%20-%20VIRUS:%20W32/Sober-C\nreturn_value=discard\nexit_code=99
> Aug 1 18:47:56 iris sendmail[11524]: l71Glqed011524:
> milter=amavis-milter, discard
> Aug 1 18:47:56 iris sendmail[11524]: l71Glqed011524: Milter: data,
> discard
> Aug 1 18:47:56 iris sendmail[11524]: l71Glqed011524: discarded
>
>
> anyone may give me a suggestion how can I solve this problem ?
>
> thanks
>
> Riccardo
>
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/...fo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/
>

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/