[Mimedefang] action_drop_with_warning and refuse to sender
dfs at roaringpenguin.com
Fri Aug 24 22:05:47 EDT 2018
On Fri, 24 Aug 2018 23:35:54 +0200
Marcus Schopen <lists at localguru.de> wrote:
> That might me right in most of the cases. But if you do a "silent"
> reject, this has to be communicated very clearly to the recipient, as
> well as rejecting at a spamassassin score of >= 5. This is nothing you
> can decide on your own as postmaster, just because it makes sense.
It's not silent. The sender will get a delivery failure notification.
> I agree that most detected virus mails (I use clamav) are virus mails.
> But I myself got some valid emails from Amazon, which were marked as
> "Heuristics.Phishing.Email.SpoofedDomain" and therefore those emails
> were rejected.
Ah, well. Don't use those dangerous signatures. Were those official
ClamAV signatures or third-party signatures? Also, I'd check the virus
name and maybe quarantine rather than bounce on "Heuristics" hits.
More information about the MIMEDefang