To answer both questions: >> OK, I have to ask... Are you sending notifications to local users whose >> outbound mail is infected, or are you sending bounce messages to forged >> senders, and thereby getting yourself on blacklists all over the place?
I've stopped the sending of bounce messages. What I wanted to do was send email to the local user who was meant to RECEIVE the viral email. I only have a few email users on my server (the MSA development team) and we make heavy use of the POP3Sync feature. Even if I could just get a notification to be sent to the postmaster ONLY would suffice. In other words, I want some form of notification to go out when a viral email is received. >> Would you be willing to share you configuration settings for Norton >> Corporate AV and xmail? That wouldn't be a problem. What I've used is the actual DOS corporate edition. It should be found on CD 2 of the Norton CDs. The files needed are: vscand.exe enuvscan.dat vb*.vbd (the virus definitions) The xav.ini configuration file contains: AntivirusPath=C:\Intranet\MailRoot\nav\vscand.exe AntivirusCommand=/ALL /NOBOOT /NOCLEAN /NOMEM *.* AntivirusReturn=8 The xav.tab file contains: "C:\Intranet\MailRoot\xav\xav.exe" "C:\Intranet\MailRoot\xav" "@@FILE" "@@FROM" "@@RCPT" "5" The filters.in.tab and filters.out.tab files contain: "*" "*" "0.0.0.0/0" "0.0.0.0/0" "xav.tab" You also need to change the startup login properties for Xmail from the "SYSTEM" account to a local (admin) account (only tested with the currently logged in user). For some reason, vscand.exe won't run properly under the "SYSTEM" account :S. BTW: I'm using Norton Antivirus Corporate Edition v7.6. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
