Matt, > I'm running amavisd-new-2.3.3 > I recently noticed when the Worm.Mytob.CV comes in which seems to > contain a .zip file with a double-extension file inside, my banned rules > trigger correctly. (which are set to D_BOUNCE) > But instead of acting upon it, amavisd asks my virusscanner too which in > the end finally discards it. (D_DISCARD) > This isn't much of a problem mail-wise but it messes up my stats a bit > as the mail now counts as BANNED _AND_ INFECTED > I'd prefer only have it listed as INFECTED (or BANNED if not otherwise > possible) > > Is is possible to somewhere tell it to end at its first finding or > something like that?
How do you collect your statistics? In the amavisd-agent report counters each mail is counter to exactly one category. It falls in one of the following categories, first match wins: virus, banned, spam, bad-header, oversized, clean. See the first section in: http://www.ijs.si/software/amavisd/amavisd-new-docs.html It is important that virus scanning is not skipped even if mail contents is banned: with infected mail it is desirable that nondelivery notification is NOT sent, while in banned but non-infected mail a NDN is usually desired. Mark ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
