Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-28 Thread Chaitanya via clamav-users
Unsubscribe On Thu, Feb 25, 2021 at 8:58 AM Joe Acquisto-j4 wrote: > > > Perhaps you should look into MailScanner and MailWatch. Mailscanner > (package > > for Suse available) will handle the interaction with spamassassin and > clamd > > (as well as other A/V solutions) and MailWatch provides a

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Joe Acquisto-j4
> Perhaps you should look into MailScanner and MailWatch. Mailscanner (package > for Suse available) will handle the interaction with spamassassin and clamd > (as well as other A/V solutions) and MailWatch provides a nice GUI for > quarantine and archive. Once set they just work. > > Rick >

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Rick Cooper
Perhaps you should look into MailScanner and MailWatch. Mailscanner (package for Suse available) will handle the interaction with spamassassin and clamd (as well as other A/V solutions) and MailWatch provides a nice GUI for quarantine and archive. Once set they just work. Rick Joe Acquisto-j4

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Arjen de Korte via clamav-users
Citeren Matus UHLAR - fantomas : you can use amavisd-new, as milter (using amavisd-milter) or maybe postfix content_filter (but that's post-queue which means you can't reject it anymore and sending bounces is not safe) Postfix has also a smtpd_proxy_filter, which does basically the same as

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Matus UHLAR - fantomas
This has probably drifted as far OT for this list as it should go. Welcome to the delights of running your own mail server. I've been doing it for over a quarter of a century, and I wouldn't have it any other way, but it ain't all roses. Perhaps you could share with us why you feel the need to

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 24 Feb 2021, Joe Acquisto-j4 wrote: ... limited familiarity ... Of course. It all takes time and neurone cycles. There's a simple-minded but reasonable view of the milter API at https://howto.lintel.in/what-is-milter/ which has a useful diagram although it's inaccurate.

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Grant Taylor via clamav-users
On 2/24/21 9:47 AM, Joe Acquisto-j4 wrote: Back OT, my post was about dealing with items that have already been processed and are in the posfix HOLD queue, per the action of clamav-milter, waiting for disposition in some way. Hypothetically, a milter, such as clamav-milter, could say: ```

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Grant Taylor via clamav-users
On 2/24/21 9:56 AM, Joe Acquisto-j4 wrote: Thanks. Workable. *nod* Ah. Well I did not mean to suggest the milter should "manage" the postfix queue at all, but could alter any "directive" as to disposition. The log messages I noticed, for "infected" mail (/var/log/mail) seem to suggest

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Joe Acquisto-j4
> On 2/24/21 6:26 AM, Joe Acquisto-j4 wrote: >> For now I will settle on a cron job script that peeks at the hold queue >> every so often and alerts someone (me) with an alert. > > *nod*nod* > > I have a daily cron job that runs a script which shows me: > >- Number of messages which are:

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Joe Acquisto-j4
. . . > This has probably drifted as far OT for this list as it should go. > Welcome to the delights of running your own mail server. I've been > doing it for over a quarter of a century, and I wouldn't have it any > other way, but it ain't all roses. Perhaps you could share with us > why you

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Grant Taylor via clamav-users
On 2/24/21 6:26 AM, Joe Acquisto-j4 wrote: For now I will settle on a cron job script that peeks at the hold queue every so often and alerts someone (me) with an alert. *nod*nod* I have a daily cron job that runs a script which shows me: - Number of messages which are: - Normally

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 24 Feb 2021, Joe Acquisto-j4 wrote: I tend to agree with the "NO" votes. But, in the postfix "FILTER_README" the author(s) suggest it is not a great idea, these days, to send the email back to the sender, as the sender is very likely to be "spoofed". You need to understand

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Joe Acquisto-j4
>> Citeren Joe Acquisto-j4 : >> >>> Another question from the peanut gallery (a kids TV show reference from >>> the 1950's. Which should tell you something) . . . >>> >>> With a local test email EICAR is detected and fed back to postfix. >>> Ends up in hold queue as you would expect as >>>

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 24 Feb 2021, Andrew C Aitchison via clamav-users wrote: On Tue, 23 Feb 2021, Joe Acquisto-j4 wrote: Wondering now what people generally do with infected mail? That is, is there a general consensus? Would it be "safe" (for the systems) to simply send the mail through, to

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-23 Thread Andrew C Aitchison via clamav-users
On Tue, 23 Feb 2021, Joe Acquisto-j4 wrote: Wondering now what people generally do with infected mail? That is, is there a general consensus? Would it be "safe" (for the systems) to simply send the mail through, to the end use and merely tag the subject line with "Virus Detected" as SPAM

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-23 Thread Joe Acquisto-j4
> Citeren Joe Acquisto-j4 : > >> Another question from the peanut gallery (a kids TV show reference from >> the 1950's. Which should tell you something) . . . >> >> With a local test email EICAR is detected and fed back to postfix. >> Ends up in hold queue as you would expect as >> per below

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-23 Thread Arjen de Korte via clamav-users
Citeren Joe Acquisto-j4 : Another question from the peanut gallery (a kids TV show reference from the 1950's. Which should tell you something) . . . With a local test email EICAR is detected and fed back to postfix. Ends up in hold queue as you would expect as per below as /var/log/mail says:

[clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-23 Thread Joe Acquisto-j4
Another question from the peanut gallery (a kids TV show reference from the 1950's. Which should tell you something) . . . With a local test email EICAR is detected and fed back to postfix. Ends up in hold queue as you would expect as per below as /var/log/mail says: (snipped)