Re: [Clamav-users] contrib/init/RedHat suggested patch

[Joe Maimon]

Damian Menscher wrote:
On Mon, 16 Aug 2004, Richard A Nelson wrote:
 

On Mon, 16 Aug 2004, Todd Lyons wrote:
   

It shouldn't, however change if a virus is accepted - since sendmail
should be tempfailing mail until the milters are functioning.
       

Incorrect, depending on how you define your milter call for sendmail.
     

Yes, I guess one cant legislate sanity, can one :(
But spamassassin and clamav should default to tempfail !
...still cant believe that
people aren't recommending a safe, by default setup.
   

We are.  ;)  For most mailserver admins, the danger of losing our jobs
is much greater if we tempfail all incoming mail due to a clamav crash
than is the danger of losing our jobs due to a couple of viruses leaking
through.  Where email is concerned, message delivery is critical.
Virus and spam filtering are features.
Damian Menscher
 

Hear Hear. Precisely right in any service situation I have seen. More 
important to get email than to get clean email. At least these days, for 
whatever reasons. Especialy when customers may/should have their own 
line of defense.

Also why limiting sendmail connections/rate limiting or attachment sizes 
in repsonse to clamav limits is not the way to go, as I have advocated 
in the past.

I advocate running a second line virus scanner with quarantine and 
notifying site postmaster/administrator to catch the ones that slip 
through for whatever reason, and actualy keep them around for diagnostics.

AMavisd-new works well for this, on sendmail.
One can get rid of the ones clamav recognizes by running
#!/bin/bash
AMAVIS_QDIR="/var/lib/amavis/virusmails"
for tempvar in `ls $AMAVIS_QDIR`; do
       echo "$AMAVIS_QDIR/$tempvar"
       cat "$AMAVIS_QDIR/$tempvar" | clamdscan --disable-summary -
       if (( $? == 1 )); then
               rm -- "$AMAVIS_QDIR/$tempvar"
       fi
done


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users