Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 11th February 2007, 18:58
supertom64 supertom64 is offline
Junior Member
 
Join Date: Feb 2007
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
Default antivirus-admin notification in 2.2.9

Hi,

I have installed ispconfig 2.2.9 on centos 4.4 which work fine so far except the notification for virus mails which should be sent to Antivirus-Admin.

What I could see is, that mail is scaned with clamassassin and that virus mails are sent to /dev/null but never any notification is sent to the email I specified as Antivirus-Admin.

I found that trashscan is configured with the email I specified but it looks like trashscan is superceded with clamassassin.

Since virus emails could be sent from a valid sender, it would be great to inform either the sender or maybe better the recipient that a mail has failed due to a virus.

Would it be possible to send only the header of the virus email via procmail before the mail is kicked to the trash ?

thx
cu
Tom
Reply With Quote
Sponsored Links
  #2  
Old 12th February 2007, 14:53
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,740 Times in 2,575 Posts
Default

Quote:
Originally Posted by supertom64
What I could see is, that mail is scaned with clamassassin and that virus mails are sent to /dev/null but never any notification is sent to the email I specified as Antivirus-Admin.
What's in the mail log when a virus mail arrives on your system?

To be honest, I'm not sure if we removed the virus notification emails...
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 12th February 2007, 17:02
supertom64 supertom64 is offline
Junior Member
 
Join Date: Feb 2007
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by falko
What's in the mail log when a virus mail arrives on your system?
I have tested with the eicar testmail from heise.
The postfix maillog shows first a delivery to admispconfig, ( i guess to count the size) and then it is delivered to the info@ mailaccount, without errors.
Looks like a normal delivery of a mail but neither there is sent a mail to Antivirus-Admin nor to the info@ account, as well there is no answer sent back to the sender (which is ok due to sender spoofing)
Having a look at the .antivirus.rc
:0fw
| /home/admispconfig/ispconfig/tools/clamav/bin/clamassassin

:0:
* ^X-Virus-Status: Yes
/dev/null

it seems that virus detection is working and the mail is sent to the trash (/dev/null)

execpt there is something magic in clamassassin I have not found yet I could not figure out how mail should be sent to the Antivirus-Admin.

Maybe a procmail roule like
:0hc
* ^X-Virus-Status: Yes
!antivirus@localhost
could this, but I am not a procmail geek so far :-)

thx
cu
Tom
Reply With Quote
  #4  
Old 13th February 2007, 17:49
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,740 Times in 2,575 Posts
Default

This link might be interesting: http://www.howtoforge.com/procmail_tips_recipes
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 14th February 2007, 17:38
supertom64 supertom64 is offline
Junior Member
 
Join Date: Feb 2007
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default

@Falko
Thx for this link.

I found an easy solution within .html-trap.rc which I modified a little and
.antivirus.rc now looks like this:

:0fw
| /home/admispconfig/ispconfig/tools/clamav/bin/clamassassin

:0hci
* ^X-Virus-Status: Yes
| ( \
echo "To: $LOGNAME@localhost.localdomain";\
echo 'From: admispconfig@localhost.localdomain';\
echo 'Subject: Virus Warning';\
echo "X-Loop: Email Security Warning $HOST $SECRET";\
echo ;\
echo 'Headers from message:';\
echo ;\
sed -e 's/^/> /' ;\
) | $SENDMAIL -oi $LOGNAME

:0:
* ^X-Virus-Status: Yes
/dev/null

maby this could be done more elegant but it works for me
cu
Tom
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
E-Mail Accounts with the Admin option enabled get "no subject and no sender" e-mails teleriddler General 7 3rd November 2007 01:05
Admin access and user listing is broken cryptic General 4 31st December 2006 20:27
Rename folder -> create new folder equals contents of old folder BlueStream General 20 15th December 2006 03:32
Initial Login (admin and admin) not working! zephirus79 Installation/Configuration 3 14th November 2006 10:29
Trashscan Notification Problem morphinex Installation/Configuration 2 1st October 2005 17:39


All times are GMT +2. The time now is 03:21.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.