[Clamav-users] sending notification to postmaster only
I have just installed clamav 0.84 with clamav-milter. I want notifications to go ONLY to the local postmaster address specified in /etc/sysconfig/clamav-milter. I do not want a message to go to the sender (since most addresses are forged), nor do I want a message to go to the recipient (because they freak out). I only want it to go to the postmaster so I can keep track of who is sending us viruses so I can block those IP addresses if necessary. I haven't been able to figure out how to turn off sending to the sender address. Here is my /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=10 --force-scan --postmaster=[EMAIL PROTECTED] --postmaster-only --headers --noreject --from=[EMAIL PROTECTED] --dont-log-clean -obl /var/milter/clmilter.sock ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] sending notification to postmaster only
On Thursday 12 May 2005 16:17, Chad Jones wrote: I have just installed clamav 0.84 with clamav-milter. I want notifications to go ONLY to the local postmaster address specified in /etc/sysconfig/clamav-milter. I do not want a message to go to the sender (since most addresses are forged), nor do I want a message to go to the recipient (because they freak out). I only want it to go to the postmaster so I can keep track of who is sending us viruses so I can block those IP addresses if necessary. I haven't been able to figure out how to turn off sending to the sender address. man clamav-milter will tell you what the -b option does. Go from there... Here is my /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=10 --force-scan --postmaster=[EMAIL PROTECTED] --postmaster-only --headers --noreject --from=[EMAIL PROTECTED] --dont-log-clean -obl /var/milter/clmilter.sock ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] sending notification to postmaster only
Unfortunately the -b option doesn't fix this. When the -b option is set then a notification goes to the sender and the postmaster, which is what I would expect since that's what the man page says that -b does. I don't want the notification to go to the sender, just to the postmaster. Here is my revised /etc/sysconfig/clamav-milter CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=10 --force-scan --postmaster=[EMAIL PROTECTED] --postmaster-only --headers -b --from=[EMAIL PROTECTED] --dont-log-clean -obl /var/milter/clmilter.sock Nigel Horne wrote: On Thursday 12 May 2005 16:17, Chad Jones wrote: I have just installed clamav 0.84 with clamav-milter. I want notifications to go ONLY to the local postmaster address specified in /etc/sysconfig/clamav-milter. I do not want a message to go to the sender (since most addresses are forged), nor do I want a message to go to the recipient (because they freak out). I only want it to go to the postmaster so I can keep track of who is sending us viruses so I can block those IP addresses if necessary. I haven't been able to figure out how to turn off sending to the sender address. man clamav-milter will tell you what the -b option does. Go from there... Here is my /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=10 --force-scan --postmaster=[EMAIL PROTECTED] --postmaster-only --headers --noreject --from=[EMAIL PROTECTED] --dont-log-clean -obl /var/milter/clmilter.sock ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] sending notification to postmaster only
On Thu, 12 May 2005, Chad Jones wrote: Unfortunately the -b option doesn't fix this. Of course not, it's the problem. ;) When the -b option is set then a notification goes to the sender and the postmaster, which is what I would expect since that's what the man page says that -b does. I don't want the notification to go to the sender, just to the postmaster. Well, maybe you shouldn't use the -b option, then? man clamav-milter will tell you what the -b option does. Go from there... Apparently Nigel was too subtle. Let's look at your original options: Here is my /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=10 --force-scan --postmaster=[EMAIL PROTECTED] --postmaster-only --headers --noreject --from=[EMAIL PROTECTED] --dont-log-clean -obl /var/milter/clmilter.sock ^ * You have a -b here that you don't want. * Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] sending notification to postmaster only
Damian Menscher wrote: Apparently Nigel was too subtle. Let's look at your original options: Here is my /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=10 --force-scan --postmaster=[EMAIL PROTECTED] --postmaster-only --headers --noreject --from=[EMAIL PROTECTED] --dont-log-clean -obl /var/milter/clmilter.sock ^ * You have a -b here that you don't want. * Damian Menscher But Chad wants a message sent to the postmaster. It appears that the only option he has found that sends to postmaster -b is not satisfactory because it also sends to sender and this is likely to have been spoofed. I also would like a message to [EMAIL PROTECTED](we only get 500 messages a day total) but I don't want to send to spoofed addresses as well I have not found this option either. Maybe I need glasses. ;-) Regards Max ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] sending notification to postmaster only
On Fri, 13 May 2005, Max Stam wrote: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=10 --force-scan --postmaster=[EMAIL PROTECTED] --postmaster-only --headers --noreject --from=[EMAIL PROTECTED] --dont-log-clean -obl /var/milter/clmilter.sock ^ * You have a -b here that you don't want. * But Chad wants a message sent to the postmaster. It appears that the only option he has found that sends to postmaster -b is not satisfactory because it also sends to sender and this is likely to have been spoofed. I also would like a message to [EMAIL PROTECTED](we only get 500 messages a day total) but I don't want to send to spoofed addresses as well I have not found this option either. Maybe I need glasses. ;-) Unfortunately the documentation is not very clear. Here's my understanding: no flags: postmaster and recipient get warnings --quiet: nobody gets a warning --postmaster-only: only postmaster gets a warning --bounce: sender and postmaster get warnings The OP was using --postmaster-only AND --bounce. The --bounce was causing warnings to go back to the sender, which is why Nigel and I are saying to remove the -b. Hope it's finally clear. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] sending notification to postmaster only
Damian Menscher wrote: On Fri, 13 May 2005, Max Stam wrote: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=10 --force-scan --postmaster=[EMAIL PROTECTED] --postmaster-only --headers --noreject --from=[EMAIL PROTECTED] --dont-log-clean -obl /var/milter/clmilter.sock ^ * You have a -b here that you don't want. * But Chad wants a message sent to the postmaster. It appears that the only option he has found that sends to postmaster -b is not satisfactory because it also sends to sender and this is likely to have been spoofed. I also would like a message to [EMAIL PROTECTED](we only get 500 messages a day total) but I don't want to send to spoofed addresses as well I have not found this option either. Maybe I need glasses. ;-) Unfortunately the documentation is not very clear. Here's my understanding: no flags: postmaster and recipient get warnings --quiet: nobody gets a warning --postmaster-only: only postmaster gets a warning --bounce: sender and postmaster get warnings The OP was using --postmaster-only AND --bounce. The --bounce was causing warnings to go back to the sender, which is why Nigel and I are saying to remove the -b. Hope it's finally clear. Damian Menscher Yup Glasses Max ___ http://lurker.clamav.net/list/clamav-users.html
