I am getting lots of these, and clamav is detecting them fine, but it clearly is trying to email back the "sender" with a notification.
As the reply to is spoofed, this makes no sense at all (and i am getting lots of bounces). How do we stop this happening?
Cheers
Brian
Clamav doesn't send e-mails, depending on your setup you'll have to configure the AV <-> SMTP server glue software.
If you are using Amavis for example, look for "$viruses_that_fake_sender_re" in amavisd.conf :
Here's an example that should help : $viruses_that_fake_sender_re = new_RE( qr'nimda|hybris|klez|bugbear|yaha|braid|sobig|fizzer|palyh|peido|holar'i, qr'tanatos|lentin|bridex|mimail|trojan\.dropper|dumaru|gibe\.f'i, );
-- Lionel Bouton - inet6 --------------------------------------------------------------------- o Siege social: 51, rue de Verdun - 92158 Suresnes / _ __ _ Acces Bureaux: 33 rue Benoit Malon - 92150 Suresnes / /\ /_ / /_ France \/ \/_ / /_/ Tel. +33 (0) 1 41 44 85 36 Inetsys S.A. Fax +33 (0) 1 46 97 20 10
------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
