[prev in list] [next in list] [prev in thread] [next in thread] 

List:       amavis-user
Subject:    Re: [AMaViS-user] warnvirussender?
From:       Mark Martinec <Mark.Martinec+amavis () ijs ! si>
Date:       2010-10-22 18:13:02
Message-ID: 201010222013.03007.Mark.Martinec+amavis () ijs ! si
[Download RAW message or body]

Patrick,

> !$Amavis::Conf::warnvirussender
>   or die "The setting \$warnvirussender has been retired, ".
>            "please remove it from a configuration file\n";
> 
> Why did it go? Any chance to get it back in?

Because it is dangerous and for most purposes equivalent
to a setting:

  $final_virus_destiny = D_REJECT;
  @viruses_that_fake_sender_maps = ();

unless you really want the infected mail to propagate.

Even before the 2.7.0, a combination of $warnvirussender=1
and $final_virus_destiny=D_DISCARD was silently turned
into a:  $final_virus_destiny = D_BOUNCE


> > so, you want to 'spam' innocent victims?  forged 'from' addresses 
> > designed to create confusion?
> > and you want to be added to the backscatter blacklist?
> 
> If $warn_offsite = 0; $warnvirussender = 1; is a sane setting in a closed
> network and a legitimate use case.

No it is not sane nowadays as any decent virus provides a faked sender
address when it is running on some internal infected PC. In this
view neither $warnvirussender=1 nor $final_virus_destiny=D_BOUNCE
can safely be used, even on outbound mail.

The only useful way to warn on outbound infected mail is to
deliver notifications to a fixed e-mail address, i.e. the
$virus_admin or $newvirus_admin (or ther big brothers
@virus_admin_maps, @newvirus_admin_maps, %admin_maps_by_ccat).

Another option might be to send warnings to an authenticated
username used on mail submission, but this is too installation
specific, hard to provide a general solution.

  Mark

------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 Please visit http://www.ijs.si/software/amavisd/ regularly
 For administrativa requests please send email to rainer at openantivirus dot org
[prev in list] [next in list] [prev in thread] [next in thread]