On Wed, Apr 02, 2003 at 09:04:00AM +0800, Temp wrote: > and then I set up a virtual domain test2.com, and a user [EMAIL PROTECTED], > and I find if I use [EMAIL PROTECTED] to send a virus email to > [EMAIL PROTECTED] > I can not even get the alert to admin !! > but if I use [EMAIL PROTECTED], I could receive admin and sender > alert!!
Sounds like Q-S isn't running for email coming in from [EMAIL PROTECTED], but it is fpr [EMAIL PROTECTED] > the method of how QS send alert email ?? and I checked the queue and logs of > qmail, > there is even no sending queue for alert!! You checked /var/spool/qmailscan/qmail-queue.log and there's no mention of any alerts? Even the one that was caught? Can't happen if debugging is enabled. On the other hand, if you do see the log entries for mail from [EMAIL PROTECTED], but not for [EMAIL PROTECTED] - so again, the question is what is the difference? Do you have the correct tcpserver rules enabled to ensure that email coming in from any IP address will be passed through Q-S? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
