Re: [clamav-users] Structured.CreditCardNumber bounce

[Vladislav Kurz]

Dne Pá 1. dubna 2016 12:16:06, Bowie Bailey napsal(a):
> > 
> > Thanx!  Guess I used the term bounce incorrectly.  After looking at my
> > amavisd.conf file, I realized I have:
> > $final_virus_destiny  = D_REJECT;
> > 
> > So it is properly configured, just not behaving the way we want it to yet.
> 
> If that is the case, you have no control over the behavior.  Your server
> simply sends a message something like:
> 
> 554 Virus found - Signature is Heuristics.Structured.CreditCardNumber
> 
> to the sending server.  It is up to them what they do with that. You
> have no control over the content of the bounce message because your
> server isn't the one sending it.
> 
> However, you should verify that Amavis is being called during the
> original receipt of the message.  If it is being called later in the
> process, after your server has accepted the message, then that D_REJECT
> will turn into a bounce.  (AFAIK... I haven't messed with Amavis configs
> in a while)

The most common setup of postfix+amavis, I have seen, is that amavis is called 
AFTER the message has been accepted by postfix. In that case even if you set 
amavis to D_REJECT you effectively do bounce. The difference is who controls 
the 
content of the bounce message. In D_BOUNCE it is amavis, in D_REJECT it is 
postfix. But both are under your control, and both are wrong. You do 
backscatter spam in both cases.

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] important message

[Joel Esler]

This user has been removed from the list.

On 3 Apr 2016, at 18:44, li...@kratzt.net wrote:

> Hello!
>
>
>
> New message, please read 
>
>
>
> li...@kratzt.net
>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] important message

[Gene Heskett]

On Sunday 03 April 2016 19:04:18 Joel Esler wrote:

> This user has been removed from the list.
>
What viri was in it?  Clamscand did not alarm, and I'd assume it should 
have yelled.

Thanks Joel.

> On 3 Apr 2016, at 18:44, li...@kratzt.net wrote:
> > Hello!
> >
> >
> >
> > New message, please read 
> >
> >
> >
> > li...@kratzt.net
> >
> > ___
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] important message

[Joel Esler (jesler)]

May not have been. I just happened to see it, knew it was Crap and removed the 
user.  Kinda standard procedure.  If I had to guess, I'm betting pharma spam.  
I can sandbox it and see next time I'm at my desk.

--
Joel Esler
iPhone

On Apr 3, 2016, at 7:29 PM, Gene Heskett 
mailto:ghesk...@wdtv.com>> wrote:

On Sunday 03 April 2016 19:04:18 Joel Esler wrote:

This user has been removed from the list.

What viri was in it?  Clamscand did not alarm, and I'd assume it should
have yelled.

Thanks Joel.

On 3 Apr 2016, at 18:44, li...@kratzt.net wrote:
Hello!



New message, please read 



li...@kratzt.net

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml