Re: [exim] Fake ACCEPT (ahem)

2007-08-24 Thread Ian Eiloart
--On 23 August 2007 11:55:45 +0100 Dave Evans [EMAIL PROTECTED] wrote: On Thu, Aug 23, 2007 at 12:37:57PM +0200, Marcin Krol wrote: Not if you're rejecting during the SMTP transaction, which is I think what was being discussed originally. Correct, *but the default clamav message saying

[exim] Fake ACCEPT (ahem)

2007-08-23 Thread Marcin Krol
Hello, OK, so as some of you may know, clamav now features filtering out phishing and/or spam as well. The problem is this generates rather unreadable reject messages: SMTP error from remote mail server after end of data: host mail.da4.promo.pl [83.149.102.11]: 550 Wirus (virus):

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Dave Evans
On Thu, Aug 23, 2007 at 11:35:40AM +0200, Marcin Krol wrote: Hello, OK, so as some of you may know, clamav now features filtering out phishing and/or spam as well. The problem is this generates rather unreadable reject messages: SMTP error from remote mail server after end of data:

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Jan-Piet Mens
On Thu Aug 23 2007 at 11:47:17 CEST, Dave Evans wrote: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No! That causes collateral spam! Think faked sender... -JP -- ## List details

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread John Hall
On 23/08/07, Jan-Piet Mens [EMAIL PROTECTED] wrote: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No! That causes collateral spam! Think faked sender... Not if you're rejecting during the

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Dave Evans
On Thu, Aug 23, 2007 at 11:52:27AM +0200, Jan-Piet Mens wrote: On Thu Aug 23 2007 at 11:47:17 CEST, Dave Evans wrote: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No! That causes

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Mike Cardwell
Jan-Piet Mens wrote: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No! That causes collateral spam! Think faked sender... No it doesn't. Not if you reject during SMTP. Collateral spam is

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Mike Cardwell
Mike Cardwell wrote: What the original author of this thread is looking for here is fakereject. If you do this: accept control = fakereject Then the message will look to the sender as though it has been accepted, but instead of hitting the routers it will just disappear into a

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Marcin Krol
John Hall pisze: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No! That causes collateral spam! Think faked sender... Not if you're rejecting during the SMTP transaction, which

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Dave Evans
On Thu, Aug 23, 2007 at 12:37:57PM +0200, Marcin Krol wrote: Not if you're rejecting during the SMTP transaction, which is I think what was being discussed originally. Correct, *but the default clamav message saying so is unreadable*. So I need to blackhole the message myself (do

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Mike Cardwell
Marcin Krol wrote: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No! That causes collateral spam! Think faked sender... Not if you're rejecting during the SMTP transaction,

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Marcin Krol
Dave Evans pisze: This is fine, but ONLY if you send the message to the correct person, which is usually NOT $sender_address. Alas in most environments you won't know who to send it to! Do NOT automatically send messages to $sender_address! Well of course that would generate mostly

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Dave Evans
On Thu, Aug 23, 2007 at 01:07:25PM +0200, Marcin Krol wrote: Dave Evans pisze: This is fine, but ONLY if you send the message to the correct person, which is usually NOT $sender_address. Alas in most environments you won't know who to send it to! Do NOT automatically send messages

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Marc Perkel
Marcin Krol wrote: Hello, OK, so as some of you may know, clamav now features filtering out phishing and/or spam as well. The problem is this generates rather unreadable reject messages: SMTP error from remote mail server after end of data: host mail.da4.promo.pl

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Marc Perkel
Marcin Krol wrote: John Hall pisze: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No! That causes collateral spam! Think faked sender... Not if you're

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Michael Sprague
On Thu, Aug 23, 2007 at 11:56:20AM +0100, Mike Cardwell wrote: Marcin Krol wrote: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No! That causes collateral spam! Think faked

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Marc Perkel
Michael Sprague wrote: On Thu, Aug 23, 2007 at 11:56:20AM +0100, Mike Cardwell wrote: Marcin Krol wrote: But why would you want to accept and silently discard mail? If the mail contains a virus, don't you think it's better that the sender is told so? No!

Re: [exim] Fake ACCEPT (ahem)

2007-08-23 Thread Marc Perkel
Here's a little bit of a modification to the traditional way to use ClamAV to give more meaningful rejection messages warnmalware = */defer_ok set acl_c_clam_message = ${lc:$malware_name} dropcondition = ${if match{$acl_c_clam_message}{trojan|worm}{true}{false}} message