Jordi, > $final_virus_destiny = D_BOUNCE; > If I send from an external account ([EMAIL PROTECTED]) a > message with virus eicar, for example, to one of my SMTP accounts > ([EMAIL PROTECTED]), the logs show the next: > > Aug 31 18:48:47 tartarus.opengea.org /usr/sbin/amavisd[5782]: (05782-04) > Blocked INFECTED (Eicar-Test-Signature), ... > > Aug 31 18:48:47 mail postfix/smtp[5741]: 51171D50064: > to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1]:10024, > delay= 0.67, delays=0.49/0/0/0.18, dsn=2.5.0, status=sent > (250 2.5.0 Ok, id=05782-04, DISCARD(bounce.suppressed))
> ... but I don't recieve any failed delivery notification. > ¿What's wrong? Nothing is wrong, the bounce was suppressed (i.e. should have been generated according to a *_destiny setting, but was considered better NOT to send it). With infected mail, if a virus name matches a @viruses_that_fake_sender_maps lookup, the sender is considered very likely to be faked and bounce (=NDN) is not send, i.e. is suppressed, effectively turning D_BOUNCE into D_DISCARD for this message. Similar mechanism applies for spam: is spam score exceeds $sa_dsn_cutoff_level, then bounce is suppressed, turning $final_virus_destiny D_BOUNCE into a D_DISCARD for this message. Mark ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
