Arjun,

> I'm using amavisd-new 2.4.3 and have problems achieving this:
> 1) warn local virus/banned recipients
> 2) warn local virus/banned senders
> 3) never send any warning or DSN offsite
> I can achive a subset of the above points, but never all at the same time.

To recognize local senders reliably, you must use a policy bank,
typically a MYNETS policy bank.


#  3) never send any warning or DSN offsite
$final_virus_destiny  = D_DISCARD;
$final_banned_destiny = D_DISCARD;
$final_spam_destiny   = D_DISCARD;


#  1) warn local virus/banned recipients
$warnbannedrecip = 1;
$warnvirusrecip  = 1;


@mynetworks = qw( ... );  # specify a list of internal networks

# apply to mail originating from @mynetworks
$policy_bank{'MYNETS'} = {

  final_spam_destiny   => D_BOUNCE,

  #  2) warn local virus/banned senders
  final_virus_destiny  => D_BOUNCE,  # not recommended
  final_banned_destiny => D_BOUNCE,

  viruses_that_fake_sender_maps => [ new_RE(
    [qr'\bEICAR\b'i            => 0],
    [qr'\b(WM97|OF97|Joke\.)'i => 0],
    [qr/^/ => 1],  # true for everything else
  )],

  # send admin notifications for internally generated junk
  virus_admin_maps => ["[EMAIL PROTECTED]"],
  spam_admin_maps  => ["[EMAIL PROTECTED]"],
},


Even internally originating viruses typically produce faked sender
address, so final_virus_destiny => D_BOUNCE is not a good idea.
It is better to enable administrator virus notifications for
internally generated viruses.

Mark

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to