martinnitram wrote:
> At clamav 0.94, it can config clamav-milter that send a "Virus Infected"
> notify email to recipient when a virus scanned. But from 0.95.1, the milter
> only had 'Blackhole' option that direct drop the virus email without any
> user notification like 0.94. Is that had any option for milter at 0.95.1 to
> do this? Thank.
clamav-milter has 5 options for this

Accept  -- not recommended if a virus is detected
Reject  -- sending server or client will get a 5xx error message
Defer   -- message acceptance is temporarily rejected for later retry
Blackhole -- sends to oblivion silently
Quarantine -- saves the message for the administrator to verify and
either accept, reject, etc.

I personally use the Reject option; but I've also heard of the
Quarantine option being used heavily as well.
The old "Virus Infected" messages were discouraged; since it causes
unnecessary back-scatter (most virus programs don't use a valid e-mail
address for the return party; or if they did they ended up being random
e-mail address entries from the true infected machine and not the host
sending the infection)

James

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to