[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Clamav

Am Mi, den 19.05.2004 schrieb Chris Kloiber um 13:29:

> > May 19 17:37:08 harry sendmail[3820]: i4J7b7u0003820: SYSERR(root): out
> > of memory: Cannot allocate memory
> >
> > Phil
> Sounds like a good default behavior to me. If you really want to enable
> it, look in /etc/sysconfig/clamav-milter and get rid of the --quiet
> flag. Remember that alot of virus' use faked From: addresses so
> notifying the 'sender' is a useless thing, and in most cases generates
> spam. I haven't used Windows to send email in years, yet I get several
> "Norton AV found: <foo!> in an email from you..." almost daily from
> people that I do not know.
> Chris Kloiber


that was my very first thought too. Since a long time those notification
mails make no sense any more. At least the OP seems to not notify the
potential sender about sending a virus mail, does he mix recipient and
sender? I do not see a switch to decide whether the recipient should get
a notification or not. I only see the --bounce option which is certainly
nasty for the reasons you spoke Chris about. The default behaviour
(without explicit overriding switches) is to send an SMTP code 550 to
the sender MTA if a virus/worm is detected by clamd. That should be
sufficient in the very most cases.

Despite that, the behaviour of clamav / clamav-milter (?) looks not
correct to me, when it exits with such an error message in the log. Like
for the OP on my FC1 mail host Sendmail and clamav-milter are working
without any problems. So what may cause the error on FC2? From the
fedora.us bugzilla entry I do not see an explanation.


Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 1 (Yarrow) on Athlon CPU kernel 2.4.22-1.2188.nptl
Sirendipity 14:02:32 up 6 days, 11:47, load average: 0.10, 0.13, 0.09 
                   [ ÎÎÏÎÎ Ï'ÎÏÏÎÎ - gnothi seauton ]
             my life is a planetarium - and you are the stars

Attachment: signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]