Guilherme,
> I had the notify sender working but since I rebooted the host it
> doesn't anymore.
> What's happening ?
> Sep 29 12:32:15 report amavis[421]: (00421-09) Checking: Zdj1avmGYOSQ
> <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
...
> Sep 29 12:32:18 report amavis[421]: (00421-09) Blocked INFECTED
> (Eicar-Test-Signature), [192.168.1.31]
> <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, quarantine: virus-Zdj1avmGYOSQ
^^^^^^^^^^^^^
The sender is considered faked and notification to sender is disabled.
This is because the name of the virus (the "Eicar-Test-Signature" in this case)
matches the lookup table @viruses_that_fake_sender_maps, which
by default is set up to always return true regardless of virus name.
You will have to change the @viruses_that_fake_sender_maps
if you want otherwise, i.e. explicitly provide virus names which
you KNOW are not faking sender address, e.g.:
@viruses_that_fake_sender_maps = (new_RE(
[qr'\bEICAR\b'i => 0], # av test pattern name
# [qr'^(WM97|OF97|Joke\.)'i => 0], # adjust names to match your AV scanner
[qr/^/ => 1], # true for everything else
));
Mark
-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
