On 11/4/2013 1:42 PM, inteq wrote: > Hello > > For some time now I was wondering why some of my pflogsumm emails were not > received. > Digging deeper into the problem today, I can see the emails are being > blocked by Postfix because it "contains" a virus. > > Nov 4 21:36:52 ns4 postfix/smtp[9383]: 338E14303B: to=<t...@example.com>, > relay=127.0.0.1[127.0.0.1]:10025, delay=0.14, delays=0.06/0/0.05/0.03, > dsn=2.0.0, status=sent (250 Virus Detected; Discarded Email) > Nov 4 21:36:52 ns4 clamsmtpd: 100013: from=r...@ns4.example.com, > to=t...@example.com, status=VIRUS:Sanesecurity.Jurlbl.3425.UNOFFICIAL > Nov 4 21:36:52 ns4 postfix/qmgr[4676]: 338E14303B: removed > > I have the latest version (beta) 1.1.5 of pflogsumm and I have tried > everything I could find to make Postfix "play nice" and allow my log to be > delivered. > I am using additional ClamAV signatures, indeed. > > Any hints how to whitelist emails sent from r...@ns4.example.com, or bypass > somehow the virus checks for some addresses?
Looks as if you're using the clamsmtp proxy. Arrange for you pflogsumm reports to be submitted to the postfix reinjection port after clamsmtp. One fairly tool to do this is with the simple mini_sendmail program. -- Noel Jones
