spam tagged twice and no emails about virus

Forum for getting help with Project Gamera, Spamassassin, Clamav, qmail-scanner and other anti-spam tools.
amit290
Forum User
Forum User
Posts: 14
Joined: Thu Nov 22, 2007 11:24 am

spam tagged twice and no emails about virus

Unread post by amit290 »

Hey,

Hope someone can help with me....

I'm on CentOS5 with Plesk 8.3. I installed Clamav, qmail-scanner, and maildrop last night via atomic's yum. Everything seems to work OK, except for my Spam gets tagged twice. I have the spamassasin addon in plesk as well. What is the best way to stop spam being tagged twice?

Do I need to remove the psa-spamassasin or can it just be turned off?

Also, I tried sending a test virus. ClamAV catched it , but I didnt get an email or a notification I had received an email containing a virus. Nothing. Any ideas?

Thank you,
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Unread post by scott »

You can remove psa-spamassassin, or just turn it off in every mailbox using global operations.

By default qmail-scanner isnt configured to notify when it detects a virus. Its a setting in /etc/qmail-scanner.ini, change it there and run qmail-scanner-reconfigure
bartje3
Forum User
Forum User
Posts: 14
Joined: Tue May 03, 2005 5:33 am
Location: Belgium

Unread post by bartje3 »

Me too, I have qmail-scanner on 2 machines, but whatever I set in the ini, only "admin" is working. What is causing this ?
I've looked into /var/qmail/bin/qmail-scanner-queue.pl and the notify is configured correctly, but still no message for recips.
Is it possible it interference with something else ?

Regards,
Bart

Edit: I found this in the FAQ:

What's this "--local-domains" option do?. This is only ever referred to if you have configured Q-S to send notifications to recipients (by default it only notifies senders and admin). If a virus is email'ed to a mailing-list, and notifications to recipients is enabled, then you end up spamming the list with these notices - something I am horrified at. To this end I've introduced the "--local-domains" concept where now only recipients containing the domains mentioned will receive notifications. This will go a long way to limiting damage. In general, try to avoid sending notifications to recipients. Place the onus on fixing the problem where it belongs - the sender.

So, if you want to use the local-domains, you'll have to add:

--local-domains $LOCALDOMAINS \

to /usr/share/qmail-scanner/qmail-scanner-reconfigure.psa

Then add:
LOCALDOMAINS="domain1,domain2" # Set this list to your local domains, separated by a comma "domain1,domain2,domain3"

to /etc/qmail-scanner.ini

Last run the reconfigure script

It would be better to read the list from /var/qmail/control/rcpthosts, but the list must be separated by a comma. A grep-script would be nicer, and included in the configure.psa-script.

EDIT 2: Found a better solution, will start a new thread with Mods
Post Reply