RE: Re: [exisRe: Reject emails with viruses and send notification to intended recipients.

 Andrew,
You mention you run a cron job to sent a list of rejected emails to the
recipients.
Could I maybe have a copy of the cron job, and script (if it is possible)?
Thanks
Werner Morgenstern


The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you received
this in error, please contact the sender and delete the material from any
computer.

-----Original Message-----
From: Rich, WhidbeyNET NOC [mailto:[email protected]] 
Sent: Monday, August 16, 2004 11:17 AM
To: Andrew Gay
Cc: [email protected]
Subject: Re: [exiscanusers] Re: [exisRe: Reject emails with viruses and send
notification to intended recipients.

Andrew,

Please reconsider "denying" virus-laden email.  The senders address is never
the one infected, and bounce messages frustrate those being impersonated.
You're also forwarding a live virus to an innocent party.

Silently quarantining and deleting viruses is what most providers have come
to understand as the best solution.

You can always create a separate ACL statement to bounce unwanted
attachments; since those senders probably are real.

Rich

[email protected]
Systems Administrator
WhidbeyNET Network Operations

On Monday, August 16, 2004, at 02:05 AM, Andrew Gay wrote:

> Hi
>
> I use 'deny' in the ACL to reject messages containing virusses or 
> unwanted attachments.  I make sure the intended recipients are 
> included in exim's log file (e.g. by using $recipients in the 
> log_message clause of the ACL).
>
> Then twice a day a cron job is run which parses the log file and sends 
> each recipient a summary of all messages intended for them that were 
> rejected.
>
> The advantage of this is that users who get sent a lot of virusses 
> will only get 2 notifications a day, rather than one for each rejected 
> message.
>
> Andrew
>
>
>> I use exim 4.41 + exiscan patch 24 on FreeBSD 4.10.  I use ClamAV
>> 0.75.1
>> as my virus scanner..
>>
>> At the moment I redirect any email where a virus has been detected to 
>> a special admin account.
>> I woould now like to alter the behaviour so that the email is 
>> rejected and the intended recipients are notified of the rejection.
>>
>> I have searched the archives and googled but can find nothing that 
>> seems relevant.
>>
>> Can anyone help please?
>>
>> TIA
>> Graeme
>>
>
>
>