On 10 May 2014 08:40:53 CEST, Alexander Wirt <[email protected]> wrote:
>On Fri, 25 Apr 2014, Daniel Pocock wrote:
>
>> Package: amavis-new
>> Version: 1:2.7.1-2
>> Severity: serious
>>
>>
>> When an email is banned due to an attachment, the ban email sent to
>the
>> sender includes the ultimate recipient's address resolved by the
>virtual
>> lookup table
>>
>> This appears to be a privacy risk, as the virtual mapping contains
>email
>> addresses that may not already be known to the sender.
>No, you should never send those mails to someone out of your domain. If
>you
>don't want to expose this, don't send this mails.
>
>This is entirely configurable and there is no useful option for amavis
>to
>prevent this problem. Therefore I'll close this bug.
>
>If you disagree feel free to reopen the bug, but imho this is a user
>configuration problem and no software problem.
>
>Alex
