I've been attempting to setup qmail with AMaViS, and I just wanted to say
thanks to Dustin Miller and Christopher Seawood for their extremely useful
posts.
Basically everything is working perfectly, except I don't want mail with
virus attachments to be bounced back to the user. I've tried this both
with and without the mime patch, and there is a problem in either case:
- Without the mime patch, the message bounces okay, but if it passes
through another virus scanner, it can trigger an alert
- With the patch, the bounce is also scanned and a virus found, resulting
in multiple virus alerts and the bounce bouncing.
Here's some background on how I'm using qmail. I am setting up a mail
gateway on a DMZ that will do no local mail delivery. The system just
accepts mail from internal systems for external delivery and visa versa.
The goal is to have this system scan all incoming and outgoing mail for
viruses. Based on this, I've renamed qmail-remote to qmail-remote-real and
setup a symbolic link from qmail-remote to scanmails.
To get things working, I would like scanmails (masquerading as
qmail-remote) to just drop the mail in case a virus is found, after sending
an alert to the adminstrator and the user. Unfortunately I can't figure
out how to do this. If I don't call qmail-remote-real and just "exit 0",
the mail is bounced. I've tried echoing results codes such as:
rK0.0.0.0 Message containing virus dropped
but this doesn't seem to work. I guess what I'm really looking for is the
correct way to tell qmail-lspawn that the message should be considered to
have been delivered successfully (which should cause it to be removed from
the queue.)
Any help on how to do this, or alternatives on how to address this in a
better way, would be greatly appreciated.
Thanks,
Chris
