On Wed, 28 Sep 2005, [EMAIL PROTECTED] wrote:
OK, in the interest of fairness, here's the list of flags:
%{__cat} <<EOF >clamav-milter.sysconfig
### Simple config file for clamav-milter, you should
### read the documentation and tweak it as you wish.
CLAMAV_FLAGS="
--config-file=%{_sysconfdir}/clamd.conf
--max-children=10
--force-scan
--quiet
--dont-log-clean
--noreject
-obl local:%{_localstatedir}/clamav/clmilter.socket
"
EOF
The relevant entries... which all seem to conflict... are:
--quiet
--noreject
--bounce (AKA -b)
--noreject: to respond OK rather than REJECT on the data phase.
--bounce: send a "virus found" message to the sender and the postmaster.
--quiet: DON'T send a "virus found" message to ANYBODY.
So --bounce and --quiet conflict. According to man clamav-milter on my system,
--quiet wins.
So the net effect seems to be that this config should silently absorb viruses -
accept, destroy, don't deliver.
Or did I miss something else?
You're right. I was (incorrectly) thinking that --bounce overrides
--quiet (which would make more sense than the actual behavior, IMHO,
since having options get ignored seems strange, especially when a
different behavior that would make sense).
So, Dag's package doesn't send bounce messages. But it has plenty of
other problems, like running freshclam only daily, not using
DNSDatabaseInfo, not running clamdwatch or clmilter_watch, not logging
through syslog, etc.
As I said, I suggested changes to Dag on Aug 14, but they didn't make it
into his .spec file. And, until they do, I'll continue to warn people
away from using his clamav package.
Damian Menscher
--
-=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=-
-=#| The above opinions are not necessarily those of my employers. |#=-
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
