efa-project.org

Posted: **12 Nov 2014 23:07**

Hi There,

EFA is working great. I do have one question that I cannot solve.

I have begun to use the EFA server for outgoing email.

If a Denied File Type (e.g. scr) is detected on my outgoing email the system removes the Denied file type (defined in filename.rules.conf) and replaces it with texted defined in deleted.filename.message.txt as an attachment and sends the email forward.

I want the system to detect the denied filetype and also NOT send the email forward with the replaced Attachment.

Basically, if an outgoing message is found with a virus or bad file type do not sent the email or any sort of notice to the recipient.

I have checked the options and settings in /etc/MailScanner/MailScanner.conf and cannot seem to find a solution.

I realize that this setting may affect both incoming and outgoing emails... I am OK with that.

Any help appreciated.

Blobb

Posted: **14 Nov 2014 09:46**

In mailscanner.conf search for the option:

Code: Select all

# Do you want to notify the people who sent you messages containing
# viruses or badly-named filenames?
# This can also be the filename of a ruleset.
Notify Senders = yes

Code: Select all

# *If* "Notify Senders" is set to yes, do you want to notify people
# who sent you messages containing attachments that are blocked due to
# their filename or file contents?
# This can also be the filename of a ruleset.
Notify Senders Of Blocked Filenames Or Filetypes = yes

change one of these settings to no (depending on how many notifications you want to send out) and restart mailscanner.

Posted: **15 Nov 2014 16:24**

Hi There,

I tried this already but to be clear... I do not want to notify anyone when an outgoing email has a virus (or bad filename) attached that is removed. I would just like the file dropped.

By Internal I mean people inside my organization... external would be people on the internet or clients.

My understanding is that if I turn on tyhe setting you suggest this when my internal users try to send out a virus then they will get notification... can live with this.

However, if someone sends an email from outside (with a fake email address for example) they will be notified that they send a virus... I am not sure this is a good solution.

Regardless, if an internal users sends and email, I really do not want the external recipient to receive a notification that one of my users tried to send them a virus.

Does this make sense? If I am being dense please let me know.

Thanks,

Blobb.

Posted: **16 Nov 2014 14:04**

I agree. I will default this to disabled on the next update.

Code: Select all

# Do you want to notify the people who sent you messages containing
# viruses or badly-named filenames?
# This can also be the filename of a ruleset.
Notify Senders = No

https://github.com/E-F-A/v3/issues/136

efa-project.org

Stop Notification of Virus to Receipient

Stop Notification of Virus to Receipient

Re: Stop Notification of Virus to Receipient

Re: Stop Notification of Virus to Receipient

Re: Stop Notification of Virus to Receipient