> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> Behalf Of - = k o l i s k o = -
> Sent: Tuesday, March 30, 2004 8:42 AM
> To: Alex Pleiner
> Cc: qmail-scanner
> Subject: Re: [Qmail-scanner-general]remove attachment from message
>
>
> You are right, when the message contains real virus.
>
> But when user send as a attachment fe .exe file, which is blocked in
> qmail-scanner, but the user dont know that, the message will be droped
> by server and sender nor recipient will not get any message. Which is
> wrong.
>
> kolisko
>
>
If the user sends a VALID .exe attachment that you have blocked using
qmail-scanner, this is not the same as someone sending a virus with a fake
from address. Using qmail-scanner 1.21, the ./configure --help shows:
--notify "none|sender|recips|admin|nmladm|nmlvadm|all" Defaults to
"psender,nmlvadm".
Comma-separated list (no spaces!)
of addresses to which alerts should
be sent to. "nmladm" means only
notify admin for "user infections",
i.e. non-mailing-list mail.
"nmlvadm" is the same as nmladm -
except
that it also doesn't notify for viral
e-mails.
i.e. just "policy" quarantines get
e-mails. This allows you to
still notify people when an e-mail is
blocked due to
a policy decision (such as blocking
password-protected
zip files), but a message tagged as
viral by an AV system
will *not* trigger notification.
Similarly, "psender" means notify the
sender only if their
e-mail was blocked for policy reasons.
i.e. if an AV system found
a virus, then don't notify the sender
as the address was probably
forged.
The default is "psender,nmlvadm" which means notify the sender ONLY if it
was blocked for policy reasons (like blocking all .exe files, NOT for virus
emails).
So basically, it is possible to notify sender or recipient when their email
was blocked because of exe attachments while at the same time not notifying
when it found a virus. I believe this is the best setup.
Jim
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
