Well, the scanmails script is responsible for calling qmail-remote-real and
qmail-local-real and sending a number of messages.  If you want to change or
remove a particular mail (sender, recipient, or virusalert), simply edit
that portion of the scanmails script.

I'm glad the patch has proved somewhat useful for you.  There were minor
tweaks to be made, but they seem to be working well for me on this end.

Best of luck,

Dustin

-----Original Message-----
From: Chris L. Mason [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 14, 1999 3:00 PM
To: [EMAIL PROTECTED]
Subject: AMaViS working ... almost



I've been attempting to setup qmail with AMaViS, and I just wanted to say
thanks to Dustin Miller and Christopher Seawood for their extremely useful
posts.

Basically everything is working perfectly, except I don't want mail with
virus attachments to be bounced back to the user.  I've tried this both
with and without the mime patch, and there is a problem in either case:

- Without the mime patch, the message bounces okay, but if it passes
  through another virus scanner, it can trigger an alert

- With the patch, the bounce is also scanned and a virus found, resulting
  in multiple virus alerts and the bounce bouncing.

Here's some background on how I'm using qmail.  I am setting up a mail
gateway on a DMZ that will do no local mail delivery.  The system just
accepts mail from internal systems for external delivery and visa versa.
The goal is to have this system scan all incoming and outgoing mail for
viruses.  Based on this, I've renamed qmail-remote to qmail-remote-real and
setup a symbolic link from qmail-remote to scanmails.

To get things working, I would like scanmails (masquerading as
qmail-remote) to just drop the mail in case a virus is found, after sending
an alert to the adminstrator and the user.  Unfortunately I can't figure
out how to do this.  If I don't call qmail-remote-real and just "exit 0",
the mail is bounced.  I've tried echoing results codes such as:

rK0.0.0.0 Message containing virus dropped

but this doesn't seem to work.  I guess what I'm really looking for is the
correct way to tell qmail-lspawn that the message should be considered to
have been delivered successfully (which should cause it to be removed from
the queue.)

Any help on how to do this, or alternatives on how to address this in a
better way, would be greatly appreciated.

Thanks,


Chris

Reply via email to