amavis-user October 2010 archive
Main Archive Page > Month Archives  > amavis-user archives
amavis-user: Re: [AMaViS-user] warnvirussender?

Re: [AMaViS-user] warnvirussender?

From: Mark Martinec <Mark.Martinec+amavis_at_nospam>
Date: Fri Oct 22 2010 - 18:13:02 GMT
To: amavis-user@lists.sourceforge.net

Patrick,

> !$Amavis::Conf::warnvirussender
> or die "The setting \$warnvirussender has been retired, ".
> "please remove it from a configuration file\n";
>
> Why did it go? Any chance to get it back in?

Because it is dangerous and for most purposes equivalent
to a setting:

  $final_virus_destiny = D_REJECT;
  @viruses_that_fake_sender_maps = ();

unless you really want the infected mail to propagate.

Even before the 2.7.0, a combination of $warnvirussender=1
and $final_virus_destiny=D_DISCARD was silently turned
into a: $final_virus_destiny = D_BOUNCE

> > so, you want to 'spam' innocent victims? forged 'from' addresses
> > designed to create confusion?
> > and you want to be added to the backscatter blacklist?
>
> If $warn_offsite = 0; $warnvirussender = 1; is a sane setting in a closed
> network and a legitimate use case.

No it is not sane nowadays as any decent virus provides a faked sender
address when it is running on some internal infected PC. In this
view neither $warnvirussender=1 nor $final_virus_destiny=D_BOUNCE
can safely be used, even on outbound mail.

The only useful way to warn on outbound infected mail is to
deliver notifications to a fixed e-mail address, i.e. the
$virus_admin or $newvirus_admin (or ther big brothers
@virus_admin_maps, @newvirus_admin_maps, %admin_maps_by_ccat).

Another option might be to send warnings to an authenticated
username used on mail submission, but this is too installation
specific, hard to provide a general solution.

  Mark

------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
 Please visit http://www.ijs.si/software/amavisd/ regularly
 For administrativa requests please send email to rainer at openantivirus dot org