You don't need the => 1 in your entry. That syntax is for creating
policy banks, where you assign values to a perl array. Normal rules
just take the values as a list.
@bypass_virus_checks_maps = ( "[EMAIL PROTECTED]");
That syntax for all of your entries should work.
Ian wrote:
> I'm having a hell of a time tuning our quarantine and thought I'd finally
> actually ask the peeps here to give me the nugget of information that I'm
> currently lacking. (Even if it's just the nouns I need to use to search
> this mailing list history for the answer)
>
> Currently, we've got a special user "archiver" that gets all emails are
> BCC'ed to. I've been trying to figure out how to get amavisd to simply
> send all emails through to this user without exception, even if it
> contains spam, bad headers, virii, etc...
>
> So far I've got these rules:
>
> @bypass_virus_checks_maps = (
> { "[EMAIL PROTECTED]" => 1,
> }
> );
>
> @virus_lovers_maps = (
> { "[EMAIL PROTECTED]" => 1,
> }
> );
>
> @bypass_spam_checks_maps = (
> { "[EMAIL PROTECTED]" => 1,
> }
> );
>
> @spam_lovers_maps = (
> { "[EMAIL PROTECTED]" => 1,
> }
> );
>
> @bypass_banned_checks_maps = (
> { "[EMAIL PROTECTED]" => 1,
> }
> );
>
> @banned_files_lovers_maps = (
> { "[EMAIL PROTECTED]" => 1,
> }
> );
>
> @bypass_header_checks_maps = (
> { "[EMAIL PROTECTED]" => 1,
> }
> );
>
> @bad_header_lovers_maps = (
> { "[EMAIL PROTECTED]" => 1,
> }
> );
>
>
> According to the logs, things seem to be working correctly:
> ###########################################################
> Sep 19 10:49:38 wopr amavis[9249]: (09249-10) FWD via SMTP:
> <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, BODY=8BITMIME RET=FULL 250
> 2.6.0 Ok, id=09249-10, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued
> as 1CA7F5D08530
> Sep 19 10:49:39 wopr amavis[9249]: (09249-10) Passed BANNED
> (multipart/mixed | application/x-zip-compressed,.zip,38426.zip |
> .dat,38426.xls), LOCAL [192.168.0.14] [192.168.0.14] <[EMAIL PROTECTED]>
> -> <[EMAIL PROTECTED]>, quarantine: FGiiGTluaLV2, Message-ID:
> <[EMAIL PROTECTED]>,
> mail_id: FGiiGTluaLV2, Hits: -, queued_as: 1CA7F5D08530, 29589 ms
> Sep 19 10:49:39 wopr amavis[9249]: (09249-10) Blocked BANNED
> (multipart/mixed | application/x-zip-compressed,.zip,38426.zip |
> .dat,38426.xls), LOCAL [192.168.0.14] [192.168.0.14] <[EMAIL PROTECTED]>
> -> <[EMAIL PROTECTED]>, quarantine: FGiiGTluaLV2, Message-ID:
> <[EMAIL PROTECTED]>,
> mail_id: FGiiGTluaLV2, Hits: -, 29589 ms
> Sep 19 10:49:39 wopr postfix/smtp[10249]: DBA835D08554:
> to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1]:10024, delay=44,
> delays=0.58/0.24/14/30, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=09249-10,
> from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 1CA7F5D08530, but 1
> DISCARD)
> Sep 19 10:49:39 wopr postfix/smtp[10249]: DBA835D08554:
> to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1]:10024, delay=44,
> delays=0.58/0.24/14/30, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=09249-10,
> from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 1CA7F5D08530, but 1
> DISCARD)
> Sep 19 10:49:39 wopr postfix/qmgr[2106]: DBA835D08554: removed
> ##############################################################
> And it even states so in the notify email as well:
>
> The message has been quarantined as: FGiiGTluaLV2
>
> The message WILL BE relayed to: <[EMAIL PROTECTED]>
>
> The message WAS NOT relayed to:
> <[EMAIL PROTECTED]>:
> ###############################################################
>
> yet, when I go in and view the quarantine, I see two copies of the email,
> one for archiver, and one for the original recipient. How can I avoid
> this?
>
>
> Also, it looks like spam that should have been cut off and dropped is
> still showing up in the quarantine as well:
> $sa_tag2_level_deflt = 5;
> $sa_kill_level_deflt = 5;
> $sa_dsn_cutoff_level = 10;
> $sa_quarantine_cutoff_level = 10;
>
>
> Finally, how the heck can I disable the bad headers check? I get way too
> many false positives from this!
>
> Thanks,
>
> Ian
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/
>
--
Puryear Information Technology, LLC
Baton Rouge, LA * 225-706-8414
http://www.puryear-it.com
Visit http://www.puryear-it.com/pubs/ebooks/ to download your free
copies of:
"Best Practices for Managing Linux and UNIX Servers"
"Spam Fighting and Email Security in the 21st Century"
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
