Re: Re: [exisRe: Reject emails with viruses and send notification to intended recipients.
"Rich, WhidbeyNET NOC" <[email protected]>
| Newsgroups | gmane.mail.exim.exiscan.user |
|---|---|
| Message-ID | <[email protected]> |
Andrew, Please reconsider "denying" virus-laden email. The senders address is never the one infected, and bounce messages frustrate those being impersonated. You're also forwarding a live virus to an innocent party. Silently quarantining and deleting viruses is what most providers have come to understand as the best solution. You can always create a separate ACL statement to bounce unwanted attachments; since those senders probably are real. Rich [email protected] Systems Administrator WhidbeyNET Network Operations On Monday, August 16, 2004, at 02:05 AM, Andrew Gay wrote: > Hi > > I use 'deny' in the ACL to reject messages containing virusses or > unwanted > attachments. I make sure the intended recipients are included in > exim's > log file (e.g. by using $recipients in the log_message clause of the > ACL). > > Then twice a day a cron job is run which parses the log file and sends > each recipient a summary of all messages intended for them that were > rejected. > > The advantage of this is that users who get sent a lot of virusses will > only get 2 notifications a day, rather than one for each rejected > message. > > Andrew > > >> I use exim 4.41 + exiscan patch 24 on FreeBSD 4.10. I use ClamAV >> 0.75.1 >> as my virus scanner.. >> >> At the moment I redirect any email where a virus has been detected to >> a >> special admin account. >> I woould now like to alter the behaviour so that the email is rejected >> and the intended recipients are notified of the rejection. >> >> I have searched the archives and googled but can find nothing that >> seems >> relevant. >> >> Can anyone help please? >> >> TIA >> Graeme >> > > >