Page 1 of 1

spam tagged twice and no emails about virus

Posted: Thu Feb 21, 2008 6:08 am
by amit290
Hey,

Hope someone can help with me....

I'm on CentOS5 with Plesk 8.3. I installed Clamav, qmail-scanner, and maildrop last night via atomic's yum. Everything seems to work OK, except for my Spam gets tagged twice. I have the spamassasin addon in plesk as well. What is the best way to stop spam being tagged twice?

Do I need to remove the psa-spamassasin or can it just be turned off?

Also, I tried sending a test virus. ClamAV catched it , but I didnt get an email or a notification I had received an email containing a virus. Nothing. Any ideas?

Thank you,

Posted: Thu Feb 21, 2008 9:06 am
by scott
You can remove psa-spamassassin, or just turn it off in every mailbox using global operations.

By default qmail-scanner isnt configured to notify when it detects a virus. Its a setting in /etc/qmail-scanner.ini, change it there and run qmail-scanner-reconfigure

Posted: Fri Jul 18, 2008 10:37 am
by bartje3
Me too, I have qmail-scanner on 2 machines, but whatever I set in the ini, only "admin" is working. What is causing this ?
I've looked into /var/qmail/bin/qmail-scanner-queue.pl and the notify is configured correctly, but still no message for recips.
Is it possible it interference with something else ?

Regards,
Bart

Edit: I found this in the FAQ:

What's this "--local-domains" option do?. This is only ever referred to if you have configured Q-S to send notifications to recipients (by default it only notifies senders and admin). If a virus is email'ed to a mailing-list, and notifications to recipients is enabled, then you end up spamming the list with these notices - something I am horrified at. To this end I've introduced the "--local-domains" concept where now only recipients containing the domains mentioned will receive notifications. This will go a long way to limiting damage. In general, try to avoid sending notifications to recipients. Place the onus on fixing the problem where it belongs - the sender.

So, if you want to use the local-domains, you'll have to add:

--local-domains $LOCALDOMAINS \

to /usr/share/qmail-scanner/qmail-scanner-reconfigure.psa

Then add:
LOCALDOMAINS="domain1,domain2" # Set this list to your local domains, separated by a comma "domain1,domain2,domain3"

to /etc/qmail-scanner.ini

Last run the reconfigure script

It would be better to read the list from /var/qmail/control/rcpthosts, but the list must be separated by a comma. A grep-script would be nicer, and included in the configure.psa-script.

EDIT 2: Found a better solution, will start a new thread with Mods