Jim, thank you, I have it set to 'psender,recips' and for some reason the
recips don't always get the notificaiton, what would cause this to occur?

For example I am testing by sending to myself a known virus and I see it get
caught, track it in the quarantine, but I never get the notification?

Best Regards,
Shannon 

-----Original Message-----
From: Jim Maul [mailto:[EMAIL PROTECTED] 
Sent: Thursday, March 18, 2004 11:10 AM
To: Shannon Werb
Subject: RE: [Qmail-scanner-general]--notify options



> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of 
> Shannon Werb
> Sent: Thursday, March 18, 2004 11:03 AM
> To: [EMAIL PROTECTED]
> Subject: [Qmail-scanner-general]--notify options
>
>
> Hi All,
> I have qmail-scanner up with clamdscan and am quite happy with it.  I 
> have been playing around with the notification features of 
> qmail-scanner when a message is stopped.
>
> I see the option for recips in the notify area, but am unclear on when 
> it triggers the notification, it looks as though if my clamdscan stops 
> it then the recip does not get the message, is this true?  Is there 
> any way to ALWAYS notify a user when a message they had incoming was 
> blocked?
>

using qmail-scanner 1.21 there are a couple more options as to who to notify
and when.

./configure --help shows:

--notify "none|sender|recips|admin|nmladm|nmlvadm|all" Defaults to
"psender,nmlvadm".
           Comma-separated list (no spaces!)
           of addresses to which alerts should
           be sent to. "nmladm" means only
           notify admin for "user infections",
           i.e. non-mailing-list mail.
           "nmlvadm" is the same as nmladm - except
           that it also doesn't notify for viral e-mails.
           i.e. just "policy" quarantines get e-mails. This allows you to
           still notify people when an e-mail is blocked due to
           a policy decision (such as blocking password-protected
           zip files), but a message tagged as viral by an AV system
           will *not* trigger notification.
           Similarly, "psender" means notify the sender only if their
           e-mail was blocked for policy reasons. i.e. if an AV system found
           a virus, then don't notify the sender as the address was probably
           forged.


Setting it to "recips" should notify the recipient whether it was a virus OR
a policy reason.  Qmail-scanner does not necessarily distinguish between the
two.  It just knows that it is quarantined but why doesnt really matter.

> Related to this, I do like the notification message, but is it at all 
> customizable?
>

you can customize the message by editing the /var/qmail/bin/qmail-scanner.pl
Somewhere around line 1850 (in qmail-scanner 1.21)

Be careful when editing this as it is VERY easy to screw up the perl file.
You will definitely want to make a backup of it first.

Jim




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to