I know this option. 

My Question was - how to remove a attachment from the message, and add a
info, that attachment was removed (similary as RAV Antivirus) by
qmail-scanner?

kolisko


V Út, 30. 03. 2004 v 17:04, Jim Maul píše:
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]
> > Behalf Of - = k o l i s k o = -
> > Sent: Tuesday, March 30, 2004 8:42 AM
> > To: Alex Pleiner
> > Cc: qmail-scanner
> > Subject: Re: [Qmail-scanner-general]remove attachment from message
> >
> >
> > You are right, when the message contains real virus.
> >
> > But when user send as a attachment fe .exe file, which is blocked in
> > qmail-scanner, but the user dont know that, the message will be droped
> > by server and sender nor recipient will not get any message. Which is
> > wrong.
> >
> > kolisko
> >
> >
> 
> If the user sends a VALID .exe attachment that you have blocked using
> qmail-scanner, this is not the same as someone sending a virus with a fake
> from address.  Using qmail-scanner 1.21, the ./configure --help shows:
> 
> --notify "none|sender|recips|admin|nmladm|nmlvadm|all" Defaults to
> "psender,nmlvadm".
>                                      Comma-separated list (no spaces!)
>                                      of addresses to which alerts should
>                                      be sent to. "nmladm" means only
>                                      notify admin for "user infections",
>                                      i.e. non-mailing-list mail.
>                                      "nmlvadm" is the same as nmladm -
> except
>                                      that it also doesn't notify for viral
> e-mails.
>                                      i.e. just "policy" quarantines get
> e-mails. This allows you to
>                                      still notify people when an e-mail is
> blocked due to
>                                      a policy decision (such as blocking
> password-protected
>                                      zip files), but a message tagged as
> viral by an AV system
>                                      will *not* trigger notification.
>                                      Similarly, "psender" means notify the
> sender only if their
>                                      e-mail was blocked for policy reasons.
> i.e. if an AV system found
>                                      a virus, then don't notify the sender
> as the address was probably
>                                      forged.
> 
> The default is "psender,nmlvadm" which means  notify the sender ONLY if it
> was blocked for policy reasons (like blocking all .exe files, NOT for virus
> emails).
> 
> So basically, it is possible to notify sender or recipient when their email
> was blocked because of exe attachments while at the same time not notifying
> when it found a virus.  I believe this is the best setup.
> 
> Jim
-- 
---
Michal Kolesár

Don't send me any attachment in Micro$oft (.DOC, .PPT) format please
Read http://www.fsf.org/philosophy/no-word-attachments.html
Preferable attachments: .PDF, .HTML, .TXT
Thanx for adding this text to Your signature



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to