>     how come after i deleted one email account like ([EMAIL PROTECTED])
> but the qmail-scanner still accept (if somebody like [EMAIL PROTECTED]
> sent to [EMAIL PROTECTED] and contains the virus w32.Sobig) ?
>     right now there are no more account for [EMAIL PROTECTED]
> I've check the qmail log and smtpd log. this is not the first time, but
> the 10 times. All from hotmail account.(that uses
> MICROSOFT-MICLOSESOURCE).

Qmail without chkusr patch does not validy receiver account.

Anyway, should update following file to drop virus files:

/var/spool/qmailscan/quarantine-attachments.txt

.exe    0       EXE files not allowed due to computer viruses
.vbs    0       VBS files not allowed due to computer viruses
.lnk    0       LNK files not allowed due to computer viruses
.scr    0       SCR files not allowed due to computer viruses
.wsh    0       WSH files not allowed due to computer viruses
.hta    0       HTA files not allowed due to computer viruses
.pif    0       PIF files not allowed due to computer viruses
.doc    0       DOC files not allowed due to computer viruses, use RTF
format.

This stop almost all *windows* viruses from emails.

and then run /var/qmail/bin/qmail-scanner-queue.pl -g

--
Eero

Reply via email to