On 07.02.22 21:36, Marc wrote:
Normally when a client connection is reject by my sendmail server, the
client is notified of the Reject message and the client server is
generating a NDR.  This is listed in my log as [1]

however when I send a virus

what's the difference between "you" and a "client connection"?

it looks like sendmail is not reporting the reject back to the
client server.  How should I 'enable' this?
[1]
xxxxx sendmail[3880]: 217LNkNB003880: ruleset=check_rcpt, 
arg1=<xxxx.xxxxx...@xxxxx.xxx>, relay=hosting.unibit.bg [194.141.8.30], reject=550 
5.7.1 < xxxx.xxxxx...@xxxxx.xxx>... Relaying denied

[2]
Feb  7 22:24:18 xxxxx clamav-milter[27526]: Message from <a...@aaaaa.aa> to 
<xxxx.xxxxx...@xxxxx.xxx> infected by Eicar-Signature
Feb  7 22:24:18 xxxxx sendmail[27607]: 217LOGRO027607: Milter insert (1): 
header: X-Virus-Scanned: clamav-milter 0.103.5 at xxxxx
Feb  7 22:24:18 xxxxx sendmail[27607]: 217LOGRO027607: Milter insert (1): 
header: X-Virus-Status: Infected (Eicar-Signature)
Feb  7 22:24:18 xxxxx sendmail[27607]: 217LOGRO027607: Milter: data, reject=554 
5.7.1 Command rejected
Feb  7 22:24:18 xxxxx sendmail[27607]: 217LOGRO027607: 
to=<xxxx.xxxxx...@xxxxx.xxx>, delay=00:00:00, pri=31328, stat=Command rejected

this looks like your sendmail DID reject mail from client.

btw. I set up my server to give information about virus rejection:

clamav-milter.conf:
...
RejectMsg Clamav detected %v

Jan 31 03:45:56 fantomas sm-mta[2056]: 20V2jeaN002056: Milter: data, reject=550 
5.7.1 Clamav detected Sanesecurity.Malware.21241.ZipHeur.UNOFFICIAL
Jan 31 03:45:56 fantomas sm-mta[2056]: 20V2jeaN002056: to=<uh...@fantomas.sk>, 
delay=00:00:08, pri=616456, stat=Clamav detected 
Sanesecurity.Malware.21241.ZipHeur.UNOFFICIAL


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux IS user friendly, it's just selective who its friends are...

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to