Public bug reported:

Binary package hint: amavisd-new

The default Jaunty config of amavisd-new comes with the option
$final_banned_destiny set to D_BOUNCE. This setting causes mail with
banned attachments (like .com files) getting bounced back to the sender.
This in turn can cause backscatter, which is a sure way to getting the
server blacklisted.

TEST CASE:
install stock amavisd-new from Jaunty, configure postfix content_filter to use 
amavisd-new, start both, send a mail with ie eicar's testing signature 
(attaching eicar.com to the mail). The file gets banned, and bounce message 
goes back to the sender.
Edit /etc/amavisd-new/conf.d/21-ubuntu_defaults, and set $final_banned_destiny 
to D_DISCARD. Restart, send mail, no bounce.

** Affects: amavisd-new (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Default Ubuntu configuration is backscatter source in Jaunty
https://bugs.launchpad.net/bugs/360689
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to amavisd-new in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to