Michael,

> as far as I can see, you have removed the code which uses
> @viruses_that_fake_sender_maps to suppress notifications for viruses,
> which fake the sender address (sub unmangle_sender). However, I can't find
> any reference to this fact in the release notes. Or am I wrong?

Unintentionally, I'll put it back. Please substitute
the sub best_try_originator with the one below:

sub best_try_originator($$) {
  my($msginfo, $virusname_list) = @_;
  my($sender_contact,$sender_source);
  $sender_contact = $sender_source = $msginfo->sender;
  for my $vn (@$virusname_list) {
    my($result,$match) = lookup(0,$vn,@{ca('viruses_that_fake_sender_maps')});
    if ($result) {  # is a virus known to fake a sender address
      do_log(2,"Virus %s matches %s, sender addr ignored",$vn,$match);
      undef $sender_contact; undef $sender_source;
      # at least try to get some info on sender source from his IP address
      my($first_rcvd_from_ip) = best_try_originator_ip($msginfo->mime_entity);
      $sender_source = '?@' . ip_addr_to_name($first_rcvd_from_ip)
        if $first_rcvd_from_ip ne '';
      last;
    }
  }
  ($sender_contact, $sender_source);
}

I was ripping out some code that was there from times of a Magistr virus
and similar, and is pretty much useless today. Thanks for noticing.

  Mark

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to