> On Wed, Apr 02, 2003 at 01:18:25AM +0800, Temp wrote:
> > I configure QS with sender and admin,
> > but later I found sometimes I could get
> > virus infor from sender and sometimes nothing for sender
> > at all !!
>
> Sounds like you're referring to the "--silent-viruses" option. Some
viruses
> change the From line, so sending an alert back to them isn't a good idea
as
> the address didn't really send the virus in the first place.
>
no, I checked my qmail-scanner-queue.pl, and the config line is:

# ./configure --spooldir /var/spool/qmailscan --qmaildir /var/qmail --bindir
/va
r/qmail/bin --qmail-queue-binary /var/qmail/bin/qmail-queue  --admin
postmaster
--domain test.net --notify sender,admin --local-domains test.net --silent-vi
ruses auto --lang en_GB --debug no --unzip 1 --add-dscr-hdrs 0 --archive
0 --red
undant no --log-details  --fix-mime 1  --scanners "vscan" --install 1

and then I set up a virtual domain test2.com, and a user [EMAIL PROTECTED],
and I find if I use [EMAIL PROTECTED] to send a virus email to
[EMAIL PROTECTED]
I can not even get the alert to admin !!
but if I use [EMAIL PROTECTED], I could receive admin and sender
alert!!
till now, I tried such domain for more than ten times, so I doubt what wrong
is with
the method of how QS send alert email ?? and I checked the queue and logs of
qmail,
there is even no sending queue for alert!!

so now I am checking QS's perl script and hope to find sth helpful.

BTW, I set a brand new RH 8.0 and I test my server with the EICAR Test
Virus,
which provided by Trend AntiVirus, and it is no harm just a *test* virus.

> You can only find a reference to this feature in the CHANGES file - I will
> update the documentation to jazz it up as a feature.
>
>
> --
> Cheers
>
> Jason Haar
> Information Security Manager, Trimble Navigation Ltd.
> Phone: +64 3 9635 377 Fax: +64 3 9635 417
> PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: ValueWeb:
> Dedicated Hosting for just $79/mo with 500 GB of bandwidth!
> No other company gives more support or power for your dedicated server
> http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
> _______________________________________________
> Qmail-scanner-general mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
>



-------------------------------------------------------
This SF.net email is sponsored by: ValueWeb: 
Dedicated Hosting for just $79/mo with 500 GB of bandwidth! 
No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to