Reading the manual and loking at the man page ...
--from=EMAIL            -a EMAIL        Error messages come from here.

The command line I use hasn't changed from 74, 75.1, and now
80rc3.clamav-milter -lo -p [EMAIL PROTECTED] -Q clamav
/var/run/clamd/clmilter.sock

Ok, how will this resolve my issue ? With 74, and 75.1, both of them
presented the apparent user that send the virus. In 80.x, it is replaced
my MAILER-DAEMON. If I understand correctly, the --from allows me to set
this to another "fixed" address, not that of the apparent sender ???

Thanks for your help

- Ken

> As a result of user pressure the "--from" argument was added, and has been
> in place since 0.75k.
>
> -Nigel
>
> On Wednesday 29 Sep 2004 19:55, Ken Jones wrote:
>> I guess a better way of putting it is this. Here is a copy of what my
>> inbox looks like:
>>
>> With 80RC3:
>> [EMAIL PROTECTED] 9:00   Virus intercepted 1.5 k
>> [EMAIL PROTECTED] 9:00   Virus intercepted 1.5 k
>>
>> With 75.1
>> [EMAIL PROTECTED] 8:50   Virus intercepted 1.6 k
>> [EMAIL PROTECTED] 8:50   Virus intercepted 1.6 k
>>
>> With 75.1, the "From" address in the in-box showed the apparent sender.
>> I
>> find this usefull as in some cases it *IS* the real sender and they
>> don't
>> know they have a virus.
>>
>> As for the -o option, in setting it up, I understood it to scan outgoing
>> mail as well. The servers I have this installed on are gateways for ALL
>> smtp mail traffic and if one of my users gets a virus, I wanted it to be
>> trapped before leaving my network.
>>
>> - Ken
>>
>>
>> > On Wednesday 29 Sep 2004 01:46, Ken Jones wrote:
>> >> All,
>> >>
>> >> I just upgraded from 75.1 to 80rc3. Prior to the upgrade, all virus
>> were
>> >> quarentined and sent to the user clamav. A notification was sent to
>> the
>> >> original receipent and the postmaster.
>> >>
>> >> The message sent to postmaster and the original receipent, appeared
>> to
>> >> arrive from the original sender, not mailer-daemon and the subject
>> was
>> >> "Virus intercepted".
>> >>
>> >> Now, after the upgrade, the message sent to the original receipent
>> and
>> >> postmaster arrive from MAILER-DAEMON.
>> >>
>> >> how do I fix this, as in some cases, the mail is expected, although
>> >> without virus and knowing the "original" sender can be useful.
>> >>
>> >> my clamav-milter startup line is:
>> >>
>> >> clamav-milter -lo -p [EMAIL PROTECTED] -Q clamav
>> >> /var/run/clamd/clmilter.sock
>> >
>> > It's likely that the messages you want are in the sendmail output
>> queue
>> > waiting
>> > to be scanned, you have enabled the -o option after all. Can I ask,
>> why
>> > have
>> > you enabled the -o option?
>> >
>> > -Nigel
>> >
>> > --
>> > Nigel Horne. Arranger, Composer, Typesetter.
>> > NJH Music, Barnsley, UK.  ICQ#20252325
>> > [EMAIL PROTECTED] http://www.bandsman.co.uk
>> >
>> >
>> > -------------------------------------------------------
>> > This SF.net email is sponsored by: IT Product Guide on
>> ITManagersJournal
>> > Use IT products in your business? Tell us what you think of them. Give
>> us
>> > Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out
>> > more
>> > http://productguide.itmanagersjournal.com/guidepromo.tmpl
>> > _______________________________________________
>> > Clamav-users mailing list
>> > [EMAIL PROTECTED]
>> > https://lists.sourceforge.net/lists/listinfo/clamav-users
>> >
>>
>>
>
> --
> Nigel Horne. Arranger, Composer, Typesetter.
> NJH Music, Barnsley, UK.  ICQ#20252325
> [EMAIL PROTECTED] http://www.bandsman.co.uk
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
> Use IT products in your business? Tell us what you think of them. Give us
> Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out
> more
> http://productguide.itmanagersjournal.com/guidepromo.tmpl
> _______________________________________________
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
>


-- 
Ken Jones
[EMAIL PROTECTED]
(630) 548-1627 (Home)
(630) 263-3574 (Cell)
https://www.kenandlori.com

Y! : [EMAIL PROTECTED]
MSN: [EMAIL PROTECTED]
AIM: ptownjones
ICQ: 9807841


_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to