Patrick,

> !$Amavis::Conf::warnvirussender
>   or die "The setting \$warnvirussender has been retired, ".
>            "please remove it from a configuration file\n";
> 
> Why did it go? Any chance to get it back in?

Because it is dangerous and for most purposes equivalent
to a setting:

  $final_virus_destiny = D_REJECT;
  @viruses_that_fake_sender_maps = ();

unless you really want the infected mail to propagate.

Even before the 2.7.0, a combination of $warnvirussender=1
and $final_virus_destiny=D_DISCARD was silently turned
into a:  $final_virus_destiny = D_BOUNCE


> > so, you want to 'spam' innocent victims?  forged 'from' addresses 
> > designed to create confusion?
> > and you want to be added to the backscatter blacklist?
> 
> If $warn_offsite = 0; $warnvirussender = 1; is a sane setting in a closed
> network and a legitimate use case.

No it is not sane nowadays as any decent virus provides a faked sender
address when it is running on some internal infected PC. In this
view neither $warnvirussender=1 nor $final_virus_destiny=D_BOUNCE
can safely be used, even on outbound mail.

The only useful way to warn on outbound infected mail is to
deliver notifications to a fixed e-mail address, i.e. the
$virus_admin or $newvirus_admin (or ther big brothers
@virus_admin_maps, @newvirus_admin_maps, %admin_maps_by_ccat).

Another option might be to send warnings to an authenticated
username used on mail submission, but this is too installation
specific, hard to provide a general solution.

  Mark

------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
AMaViS-user mailing list
[email protected] 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 Please visit http://www.ijs.si/software/amavisd/ regularly
 For administrativa requests please send email to rainer at openantivirus dot 
org

Reply via email to