Michael, > as far as I can see, you have removed the code which uses > @viruses_that_fake_sender_maps to suppress notifications for viruses, > which fake the sender address (sub unmangle_sender). However, I can't find > any reference to this fact in the release notes. Or am I wrong?
Unintentionally, I'll put it back. Please substitute the sub best_try_originator with the one below: sub best_try_originator($$) { my($msginfo, $virusname_list) = @_; my($sender_contact,$sender_source); $sender_contact = $sender_source = $msginfo->sender; for my $vn (@$virusname_list) { my($result,$match) = lookup(0,$vn,@{ca('viruses_that_fake_sender_maps')}); if ($result) { # is a virus known to fake a sender address do_log(2,"Virus %s matches %s, sender addr ignored",$vn,$match); undef $sender_contact; undef $sender_source; # at least try to get some info on sender source from his IP address my($first_rcvd_from_ip) = best_try_originator_ip($msginfo->mime_entity); $sender_source = '?@' . ip_addr_to_name($first_rcvd_from_ip) if $first_rcvd_from_ip ne ''; last; } } ($sender_contact, $sender_source); } I was ripping out some code that was there from times of a Magistr virus and similar, and is pretty much useless today. Thanks for noticing. Mark ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/