On Mon, Dec 15, 2008 at 05:04:19PM +0100, Mark Martinec wrote:
> Emiliano,
>
> > I'd like to use warnsender_by_ccat in order to advise the sender
> > that there are virus in their outgoing mails.
>
> This should not be done lightly. Practically all viruses
> and other malware nowadays fake a sender address. Responding
> to it by a NDN or by a warning sends a bounce to an innocent
> bystander, and is a major contributor to backscatter.
Hi Mark, thank you for answering.
I want to advise only sender coming from my local network.
> > I prefere to use this command instead of warnvirusssender because
> > the second one doesn't work in a policy bank, nevertheless
> > I am not able to make warnsender_by_ccat work nor
> > in the main section nor in a policy_bank section.
> >
> > These commands work properly (main section):
> >
> > $warnvirussender = 1;
> > $warnrecip_maps_by_ccat{+CC_VIRUS} = [ 1 ];
> >
> > but this one doesn't work:
> >
> > $warnsender_by_ccat{+CC_VIRUS} = [ 1 ];
> >
> > I am using amavis 2.4.2-6.1 and postfix 2.3.8-2+etch1
>
> The above should work, even though it would be more
> correct to say:
> $warnsender_by_ccat{+CC_VIRUS} = 1;
> because (unlike %warnrecip_maps_by_ccat) the %warnsender_by_ccat
> is not a by-recipient map, so its values are plain booleans
> and not lists of lookup tables.
>
> But what is probably happening in your case is suppression of
> sender notifications by the @viruses_that_fake_sender_maps list,
> which by default returns true for any virus name, thus NDN or a
> sender warning in response to viruses is always suppressed.
>
> Try this:
>
> @viruses_that_fake_sender_maps = (new_RE(
> [qr'^(EICAR|Joke\.|Junk\.)'i => 0],
> [qr'^(WM97|OF97|W95/CIH-|JS/Fort)'i => 0],
> [qr/^/ => 1], # true for everything else
> ));
>
> and be VERY conservative what virus names you add
> to the list as 'sincere'.
I tried it but it still doesn't work; however I don't think it's a problem
concerning @viruses_that_fake_sender_maps because
$warnvirussender = 1;
works right.
Any ideas?
Thanks,
Emiliano
--
"Un uomo sano di mente è uno che tiene sotto
chiave il pazzo interiore" - Paul Valéry
------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you. Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
