Dear Jose,
Karthik, thanks for your answer.
I still get the message delivered. I got the notification, only if it is an internal user.
I am testing with the EICAR pattern:
MailScanner[14964]: New Batch: Scanning 1 messages, 1086 bytes
MailScanner[14964]: MCP Checks: Starting
MailScanner[14964]: Virus and Content Scanning: Starting
MailScanner[14964]: /var/spool/MailScanner/incoming/14964/./218794/msg-14964-1.txt: Eicar-Test-Signature FOUND
MailScanner[14964]: /var/spool/MailScanner/incoming/14964/./218794/msg-14964-2.html: Eicar-Test-Signature FOUND
MailScanner[14964]: Virus Scanning: ClamAV found 2 infections
MailScanner[14964]: Infected message 218794 came from 10.10.250.71
MailScanner[14964]: Virus Scanning: Found 2 viruses
MailScanner[14964]: Saved infected "msg-14964-2.html" to /var/spool/MailScanner/quarantine/20040407/218794
MailScanner[14964]: Saved infected "msg-14964-1.txt" to /var/spool/MailScanner/quarantine/20040407/218794
MailScanner[14964]: Cleaned: Delivered 1 cleaned messages
MailScanner[14964]: Sender Warnings: Delivered 1 warnings to virus senders
MailScanner[14964]: New Batch: Scanning 1 messages, 1003 bytes
MailScanner[14964]: MCP Checks: Starting
MailScanner[14964]: Virus and Content Scanning: Starting
MailScanner[14964]: Uninfected: Delivered 1 messages
Virus notification using MailScanner can be done in only 3 ways:
1)Both sender and recipient - Silent Viruses = , and notify senders = yes 2)Recipient only - Silent Viruses = ALL-Viruses 3)None - Only admin is notified
4)Sender only - Not Supported
So, when a virus mail from your internal domain is sent to an outside user, either you send warning to both sender and recipient or don't notify both of them.
But, one way of notifying only the sender is possible using MCP:
Notify both sender and recipient, and block the warning mail to outside user using MCP, like a rule to delete mails with {Virus?} subjects to be deleted/archived/forwarded etc if the recipient is not from the local domain.
cheers, Karthikeyan,S. -- S.Karthikeyan | Ph: +91 (0) 44 52166646 Fax: +91 (0) 44 52113446 Opencomputing Technologies | http://opencompt.com Server Side E-Mail Protection.
