> On Wed, Apr 02, 2003 at 09:04:00AM +0800, Temp wrote: > > and then I set up a virtual domain test2.com, and a user [EMAIL PROTECTED], > > and I find if I use [EMAIL PROTECTED] to send a virus email to > > [EMAIL PROTECTED] > > I can not even get the alert to admin !! > > but if I use [EMAIL PROTECTED], I could receive admin and sender > > alert!! > > Sounds like Q-S isn't running for email coming in from [EMAIL PROTECTED], but > it is fpr [EMAIL PROTECTED] > > > the method of how QS send alert email ?? and I checked the queue and logs of > > qmail, > > there is even no sending queue for alert!! > > You checked /var/spool/qmailscan/qmail-queue.log and there's no mention of > any alerts? Even the one that was caught? Can't happen if debugging is > enabled. On the other hand, if you do see the log entries for mail from > [EMAIL PROTECTED], but not for [EMAIL PROTECTED] - so again, the > question is what is the difference? > > Do you have the correct tcpserver rules enabled to ensure that email coming > in from any IP address will be passed through Q-S? > I check it and I think it is not the mistakes of tcpserver rules. every virus email from [EMAIL PROTECTED] was been cleaned but the alert of them only has been sent to admin. so, I think there is some anti-loop mechanism in QS to avoid a bounced email to bouncer again?? but I can not find where define them in QS's perl script ! Temp > -- > Cheers > > Jason Haar > Information Security Manager, Trimble Navigation Ltd. > Phone: +64 3 9635 377 Fax: +64 3 9635 417 > PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 > > > ------------------------------------------------------- > This SF.net email is sponsored by: ValueWeb: > Dedicated Hosting for just $79/mo with 500 GB of bandwidth! > No other company gives more support or power for your dedicated server > http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/ > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general > ------------------------------------------------------- This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
