On Wed, 10 Mar 2004, Nigel Horne wrote: > On Wednesday 10 Mar 2004 10:28 am, Damian Menscher wrote: > > > The clamav-milter should be a bit more descriptive than just saying a > > virus was found. Like saying the Klez virus was found, for example. > > Please be more specific by: > (a) quoting the version of clamav-milter you're running
The latest released version: 0.67-1 > (b) giving an example of a message that you think is missing some information, since > all the messages I see already contain the virus/worm name 550 5.7.1 Virus detected by ClamAV - http://www.clamav.net > (c) what do you mean by 'message': > entry in syslog? > e-mail? > message on stderr? > debug output? None of the above. I'm referring to the text message in sendmail's rejection. > (d) pointing out and example of what more you want. How about something like: 550 5.7.1 Virus detected: Mydoom.f (http://www.clamav.net/) > > Also, there should be a way to "reject a message" 5xx status while still > > saving a copy for archival purposes. > > Why not use either the --quarantine or --quarantine-dir options for this? I might be doing something wrong, but my tests indicate that enabling --quarantine causes sendmail to accept the message and then redirect it. I want it to *reject* the message and filter it. This guards against false positives in two ways: the sender gets a bounce and resends it, while the recipient has the option to look in their folder of caught viruses. I realize this could also be accomplished by enabling the --bounce option, but with all the spoofed From: headers I find generating any new email as a result of a virus to be morally wrong. Damian Menscher -- -=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers: |#=- -=#| UIUC CITES Security Group || Beckman Imaging Technology Group |#=- ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
