I'm having a hell of a time tuning our quarantine and thought I'd finally
actually ask the peeps here to give me the nugget of information that I'm
currently lacking. (Even if it's just the nouns I need to use to search
this mailing list history for the answer)
Currently, we've got a special user "archiver" that gets all emails are
BCC'ed to. I've been trying to figure out how to get amavisd to simply
send all emails through to this user without exception, even if it
contains spam, bad headers, virii, etc...
So far I've got these rules:
@bypass_virus_checks_maps = (
{ "[EMAIL PROTECTED]" => 1,
}
);
@virus_lovers_maps = (
{ "[EMAIL PROTECTED]" => 1,
}
);
@bypass_spam_checks_maps = (
{ "[EMAIL PROTECTED]" => 1,
}
);
@spam_lovers_maps = (
{ "[EMAIL PROTECTED]" => 1,
}
);
@bypass_banned_checks_maps = (
{ "[EMAIL PROTECTED]" => 1,
}
);
@banned_files_lovers_maps = (
{ "[EMAIL PROTECTED]" => 1,
}
);
@bypass_header_checks_maps = (
{ "[EMAIL PROTECTED]" => 1,
}
);
@bad_header_lovers_maps = (
{ "[EMAIL PROTECTED]" => 1,
}
);
According to the logs, things seem to be working correctly:
###########################################################
Sep 19 10:49:38 wopr amavis[9249]: (09249-10) FWD via SMTP:
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, BODY=8BITMIME RET=FULL 250
2.6.0 Ok, id=09249-10, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued
as 1CA7F5D08530
Sep 19 10:49:39 wopr amavis[9249]: (09249-10) Passed BANNED
(multipart/mixed | application/x-zip-compressed,.zip,38426.zip |
.dat,38426.xls), LOCAL [192.168.0.14] [192.168.0.14] <[EMAIL PROTECTED]>
-> <[EMAIL PROTECTED]>, quarantine: FGiiGTluaLV2, Message-ID:
<[EMAIL PROTECTED]>,
mail_id: FGiiGTluaLV2, Hits: -, queued_as: 1CA7F5D08530, 29589 ms
Sep 19 10:49:39 wopr amavis[9249]: (09249-10) Blocked BANNED
(multipart/mixed | application/x-zip-compressed,.zip,38426.zip |
.dat,38426.xls), LOCAL [192.168.0.14] [192.168.0.14] <[EMAIL PROTECTED]>
-> <[EMAIL PROTECTED]>, quarantine: FGiiGTluaLV2, Message-ID:
<[EMAIL PROTECTED]>,
mail_id: FGiiGTluaLV2, Hits: -, 29589 ms
Sep 19 10:49:39 wopr postfix/smtp[10249]: DBA835D08554:
to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1]:10024, delay=44,
delays=0.58/0.24/14/30, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=09249-10,
from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 1CA7F5D08530, but 1
DISCARD)
Sep 19 10:49:39 wopr postfix/smtp[10249]: DBA835D08554:
to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1]:10024, delay=44,
delays=0.58/0.24/14/30, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=09249-10,
from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 1CA7F5D08530, but 1
DISCARD)
Sep 19 10:49:39 wopr postfix/qmgr[2106]: DBA835D08554: removed
##############################################################
And it even states so in the notify email as well:
The message has been quarantined as: FGiiGTluaLV2
The message WILL BE relayed to: <[EMAIL PROTECTED]>
The message WAS NOT relayed to:
<[EMAIL PROTECTED]>:
###############################################################
yet, when I go in and view the quarantine, I see two copies of the email,
one for archiver, and one for the original recipient. How can I avoid
this?
Also, it looks like spam that should have been cut off and dropped is
still showing up in the quarantine as well:
$sa_tag2_level_deflt = 5;
$sa_kill_level_deflt = 5;
$sa_dsn_cutoff_level = 10;
$sa_quarantine_cutoff_level = 10;
Finally, how the heck can I disable the bad headers check? I get way too
many false positives from this!
Thanks,
Ian
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
