As I understand it, here is the flow:
fetchmail -> exim -> cyrus
The clam and spam stuff gets done while exim is
processing.
There are lines of code in the configuration file
which tell clam and spam what and how to process.
acl_check_content:
# Reject virus infested messages.
deny message = This message contains malware
($malware_name)
demime = *
malware = */defer_ok
deny message = This message contains malformed MIME
($demime_reason)
demime = *
condition = ${if
>{$demime_errorlevel}{2}{1}{0}}
# Always add X-Spam-Score and X-Spam-Report headers,
using SA system-wide settings
# (user "nobody"), no matter if over threshold or
not.
warn message = X-Spam-Score: $spam_score
($spam_bar)
spam = nobody:true
warn message = X-Spam-Report: $spam_report
spam = nobody:true
# Add X-Spam-Flag if spam is over system-wide
threshold
warn message = X-Spam-Flag: YES
spam = nobody
# Reject spam messages with score over 10, using an
extra condition.
deny message = This message scored $spam_score
points. Congratulations!
spam = nobody:true
condition = ${if
>{$spam_score_int}{100}{1}{0}}
# finally accept all the rest
accept
[snip]
This is the standard configuration. I have not
modified it. I'm getting mail from my mailbox on my
isp. I want to get the mailserver fully functional
prior to cutting the cord.
--- [EMAIL PROTECTED] wrote:
>
> On Wed, 13 Oct 2004, Greg T. wrote:
>
> > I guess I don't understand the question. I hate
> to
> > sound dense, but could you restate? Also, be
> aware
> > that I'm no mail genius.
> > --- [EMAIL PROTECTED] wrote:
> >
> > > > Somewhere between Exim and Cyrus, selected
> emails
> > > are disappearing. I don't know what the
> criterion
> > > is for the emails coming up missing, so I
> thought
> > > I'd start with ClamAV.
> > > >
> > > > When Clam decides an email contains a virus,
> what
> > > does it (Clam) do with the email. Does it put
> the
> > > email somewhere?
> > > >
> > >
> > > Clam doesn't touch the email itself, it simply
> tells
> > > the calling program
> > > that it either is or isn't a virus. What does
> exim
> > > use to send the
> > > message off to be filtered?
>
>
> Exim is an MTA (mail transfer agent). It's job is
> to take mail in via
> smtp or a local socket and deliver it to the LDA
> (local delivery agent
> like procmail or vdeliver) so that a user can use an
> MUA (mail user agent
> like pine, outlook, etc) to read the mail. The
> scanner gets placed
> between the MTA and LDA. What is the "glue" which
> does the
> scanning/filtering from Exim?
> MTA<-->Scanner/filter<-->LDA. I don't use
> exim and this scanning mechanisim may be built in.
> Generally people use
> software like amavis as the "glue" between the MTA
> and LDA for
> scanning/filtering viruses. Either way, Clam
> doesn't do the mail
> filtering itself, it just says yes it is a virus or
> no it isn't.
>
> Does this help answer your question?
>
> --
> Eric Wheeler
> Vice President
> National Security Concepts, Inc.
> PO Box 3567
> Tualatin, OR 97062
>
> http://www.nsci.us/
> Voice: (503) 293-7656
> Fax: (503) 885-0770
>
> _______________________________________________
>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
