Re: [AMaViS-user] still getting virus notices

[Robert L. <rj...@re...>]

At 11:33 2004/04/08, Anne Ramey wrote:
>I wanted to turn off notifications for virus recipients.  my 
>/etc/amavis.conf looks like:
>
># Notify virus (or banned files) RECIPIENT?
>#  (not very useful, but some policies demand it)
>#$warnvirusrecip = 1;   # (defaults to false (undef))
>$warnbannedrecip = 1;   # (defaults to false (undef))
>
>but I'm still getting virus notifications...???

Are you sure the virus notifications you're receiving were generated by 
your amavis installation, and not by other sites?  There's a lot of 
worm-spew going around these days, and a lot of anti-virus products out 
there are sending notices to innocent parties (thanks to fake sender 
addresses and poorly-configured sites that bounce such mail).

Bear in mind that the $warn* settings in amavisd.conf only control the 
notifications that amavis issues (and only *your* amavis installation, at 
that).  They won't protect you against virus notifications received from 
other sites than your own.

There's not much you can do about virus notifications being sent to you by 
other sites, apart from treating them as spam and filtering them (e.g. with 
some custom SpamAssassin rules designed to detect this type of mail), or by 
blocking mail from the sites sending these notices.


Robert LeBlanc <rj...@re...>
Renaissoft, Inc.
Maia Mailguard <http://www.renaissoft.com/maia/>