Jason Bertoch escreveu:
On Tuesday, February 12, 2008 10:00 PM Steven Stern wrote:
Clam is reporting that one of my MX servers is a 'virus' source. How
do I tell it that the mailhop.org server is innocent and that the
source of the mail is farther up the line?
The infected machine is likely to be here:
from localhost ([127.0.0.1] helo=mhfr-05-bos.mailhop.org)
~ by mhfr-05-bos.mailhop.org with esmtp (Exim 4.68)
~ (envelope-from <[EMAIL PROTECTED]>)
~ id 1JP4o8-000DxP-Uk
~ for [EMAIL PROTECTED]; Tue, 12 Feb 2008 18:45:01
-0500
You can set CLAMAV_FLAGS with --dont-blacklist=IP[,IP...]
Just to make things clear, CLAMAV_FLAGS is a clamav-milter option,
not clamav. Again, clamav knows NOTHING about IP addresses. clamav scan
only files. Any option needed for whitelist something needs to be passed
to the software used in the middle of clamav and MTA. On this case,
clamav-milter.
--
Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br
Minha armadilha de SPAM, NÃO mandem email
[EMAIL PROTECTED]
My SPAMTRAP, do not email it
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html