Jason Bertoch escreveu:
On Tuesday, February 12, 2008 10:00 PM Steven Stern wrote:

Clam is reporting that one of my MX servers is a 'virus' source.  How
do I tell it that the mailhop.org server is innocent and that the
source of the mail is farther up the line?

The infected machine is likely to be here:
from localhost ([127.0.0.1] helo=mhfr-05-bos.mailhop.org)
~    by mhfr-05-bos.mailhop.org with esmtp (Exim 4.68)
~    (envelope-from <[EMAIL PROTECTED]>)
~    id 1JP4o8-000DxP-Uk
~    for [EMAIL PROTECTED]; Tue, 12 Feb 2008 18:45:01
-0500

You can set CLAMAV_FLAGS with --dont-blacklist=IP[,IP...]

Just to make things clear, CLAMAV_FLAGS is a clamav-milter option, not clamav. Again, clamav knows NOTHING about IP addresses. clamav scan only files. Any option needed for whitelist something needs to be passed to the software used in the middle of clamav and MTA. On this case, clamav-milter.

--


        Atenciosamente / Sincerily,
        Leonardo Rodrigues
        Solutti Tecnologia
        http://www.solutti.com.br

        Minha armadilha de SPAM, NÃO mandem email
        [EMAIL PROTECTED]
        My SPAMTRAP, do not email it




_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to