From owner-freebsd-questions@FreeBSD.ORG Fri Jul 30 20:10:41 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6FF9016A4CE for ; Fri, 30 Jul 2004 20:10:41 +0000 (GMT) Received: from internet.potentialtech.com (h-66-167-251-6.phlapafg.covad.net [66.167.251.6]) by mx1.FreeBSD.org (Postfix) with ESMTP id 43D4743D2F for ; Fri, 30 Jul 2004 20:10:41 +0000 (GMT) (envelope-from wmoran@potentialtech.com) Received: from working.potentialtech.com (pa-plum-cmts1e-68-68-113-64.pittpa.adelphia.net [68.68.113.64]) by internet.potentialtech.com (Postfix) with ESMTP id 98A7869A39; Fri, 30 Jul 2004 16:09:48 -0400 (EDT) Date: Fri, 30 Jul 2004 16:09:47 -0400 From: Bill Moran To: Logan Ashby Message-Id: <20040730160947.4fdbe0dd.wmoran@potentialtech.com> In-Reply-To: <9cd98d120407301237e31f8ef@mail.gmail.com> References: <12abd8c2040730104259ea346e@mail.gmail.com> <9cd98d120407301237e31f8ef@mail.gmail.com> Organization: Potential Technologies X-Mailer: Sylpheed version 0.9.12 (GTK+ 1.2.10; i386-portbld-freebsd4.9) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: Re: amavisd/clamav Virus Recipient email notification template woes X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jul 2004 20:10:41 -0000 Logan Ashby wrote: > On Fri, 30 Jul 2004 13:42:00 -0400, Tim Schutt wrote: > > > I've got postfix/amavisd/clamav configured on my mailserver, but I am > > having trouble getting the notification emails to format properly. > > Virus and spam notifications are a bad idea. Both types of email > forge the sender address, so notifications to the sender wind up going > to a third party that can't do anything about the problem. Notices to > the intended recipient are simply a waste of bandwidth. > > I know there are those who feel you should never discard mail, but in > this case, I'm fine with it. Agreed. I actually have people on my blocklist because their virus protection continues to send me alerts that I "may have a virus on my system" If you're going to send notification, there is only one _proper_ way to do it: analyze the Received: headers and find out where the virus _really_ originated, then contact the abuse@ address for that domain with the message. Despite how easy this is to do, it doesn't seem like a lot of AV packages bother with it ... -- Bill Moran Potential Technologies http://www.potentialtech.com