Bad Content - user notify mail

Questions and answers about how to do stuff
Post Reply
Alex
Posts: 20
Joined: 30 Dec 2012 14:38

Bad Content - user notify mail

Post by Alex » 23 Mar 2016 09:34

Hi,
there is no notify mail for mails are claimed from the filename rule "Bad content" in the quarantine.
I need a notify mail to the users. So a admin can release the requested Mail.

Please help

User avatar
shawniverson
Posts: 2880
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Bad Content - user notify mail

Post by shawniverson » 23 Mar 2016 11:22

You would need to enable this setting since the report is an attachment to the original message, and the cleaned message is not being delivered.

Note that enabling this causes spam checks to be bypassed, which is why it is off by default. So, if you get a lot of emails with viruses attached, for example, your users may receive a lot of junk with viruses stripped off.

/etc/MailScanner/MailScanner.conf

Code: Select all

Deliver Cleaned Messages = Yes
Restart MailScanner

Code: Select all

sudo service MailScanner restart
Another solution to make this work a little better would be to define a rule set and list the domains from which you want to deliver cleaned messages.
Version eFa 4.0.0 now available!

Alex
Posts: 20
Joined: 30 Dec 2012 14:38

Re: Bad Content - user notify mail

Post by Alex » 23 Mar 2016 17:43

Yes, but i need this in a special usecase.
Thanks for your help.

bexx
Posts: 6
Joined: 13 Nov 2015 08:32

Re: Bad Content - user notify mail

Post by bexx » 07 Jul 2016 12:47

i have enabled it, but no notfiy mail was sent to the user.
what could i do? is there a log file for this?


edit:
maillog

Code: Select all

Jul  7 14:40:41 mail MailScanner[30292]: New Batch: Scanning 1 messages, 51995 bytes
Jul  7 14:40:41 mail MailScanner[30292]: Virus and Content Scanning: Starting
Jul  7 14:40:41 mail MailScanner[30292]: Clamd::INFECTED::Heuristics.OLE2.ContainsMacros :: ./5E1A9100299.A3B3C/
Jul  7 14:40:41 mail MailScanner[30292]: Clamd::INFECTED:: Heuristics.OLE2.ContainsMacros :: ./5E1A9100299.A3B3C/2CCE78A8917F$
Jul  7 14:40:41 mail MailScanner[30292]: Clamd::INFECTED:: Heuristics.OLE2.ContainsMacros :: ./5E1A9100299.A3B3C/vbaProject.b$
Jul  7 14:40:42 mail MailScanner[30292]: Virus Scanning: Clamd found 3 infections
Jul  7 14:40:52 mail MailScanner[30292]: Infected message 5E1A9100299.A3B3C came from 148.251.96.162
Jul  7 14:40:52 mail MailScanner[30292]: Virus Scanning: Found 3 viruses
Jul  7 14:40:52 mail MailScanner[30292]: Viruses marked as silent: Clamd:  message was infected: Heuristics.OLE2.ContainsMacr$
Jul  7 14:40:52 mail MailScanner[30292]: Saved entire message to /var/spool/MailScanner/quarantine/20160707/5E1A9100299.A3B3C
Jul  7 14:40:52 mail MailScanner[30292]: Saved infected "2CCE78A8917F6.docm" to /var/spool/MailScanner/quarantine/20160707/5E$
Jul  7 14:40:52 mail MailScanner[30292]: Saved infected "vbaProject.bin" to /var/spool/MailScanner/quarantine/20160707/5E1A91$
do i have to enable "deliver silent virus"?

SupportOU
Posts: 47
Joined: 12 Sep 2016 18:47

Re: Bad Content - user notify mail

Post by SupportOU » 13 Feb 2017 22:15

Hi,
Ever fixed this? I have the exact same problem. But if I set deliver Silent Viruses then my users are getting the attachment, that should have been removed.

Kinda lost here,

Grtz

Post Reply