[Mimedefang] Multiple Quarantine reports
Stefano McGhee
SMcGhee at ARCweb.com
Thu Feb 27 18:16:01 EST 2003
Wil,
What code have you put into place to ensure that local messages are not
being scanned? For example, in filter_begin in mimedefang-filter, I have:
# don't check for locally submitted mail
if ($RelayAddr eq "127.0.0.1") {
return action_accept();
}
Do you have something like this? My thought it that normally quarantine is
used for virus notifications (or malicious attachments). Those would not
trigger SA. However, you are placing ENTIRE_MESSAGE into the quarantine
message which will obviously trigger SA since that's how it got to this
point in the first place :-). Something needs to be there to tell MD not to
bother to submit the message for filtering.
HTH,
Stefano
> It goes to an exchange sever after it leaves my sendmail server. The
server
> is not set to check internal mail only external. The message seems to be
> quarantined on the serve that it is received on. A quarantined message
using
> ENTIRE_MESSAGE is sent to the admin. Do you have any idea why it keeps
> adding the header info from mimedefang to the quarantined file? I did back
> one change to the mimedefang.pl so that I can send the quarantined message
> to different recipient than the Admin. Here is the change I made. Let me
> know if you have any other ideas.
More information about the MIMEDefang
mailing list