<html><body>
<p>Hello list,</p>
<p>I had these settings in my /etc/amavisd.conf (amavisd-new-2.6.6; Perl version 5.010000):</p>
<p>$final_virus_destiny = D_DISCARD;<br />$final_banned_destiny = D_PASS;<br />$final_spam_destiny = D_PASS;<br />$final_bad_header_destiny = D_PASS;<br />$warnvirussender = 1;<br />$warnvirusrecip = 1;</p>
<p>And got these loglines after sending an EICAR Virus:</p>
<p>amavis[29009]: (29009-01) LMTP::10024 /var/spool/amavis/tmp/amavis-20120120T170538-29009: <user1@example.com> -> <user2@example.com> SIZE=1975 BODY=7BIT Received: from hostname ([127.0.0.1]) by localhost (hostname [127.0.0.1]) (amavisd-new, port 10024) with LMTP for <user2@example.com>; Fri, 20 Jan 2012 17:05:38 +0100 (CET)<br />amavis[29009]: (29009-01) Checking: 0j6+cUa7qS0g [A.B.C.D] <user1@example.com> -> <user2@example.com><br />amavis[29009]: (29009-01) run_av (ClamAV-clamd): /var/spool/amavis/tmp/amavis-20120120T170538-29009/parts INFECTED: Eicar-Test-Signature<br />amavis[29009]: (29009-01) virus_scan: (Eicar-Test-Signature), detected by 1 scanners: ClamAV-clamd<br />amavis[29009]: (29009-01) SEND via SMTP: <support@example.com> -> <user2@example.com>,ENVID=AM..20120120T160539Z@hostname 250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 08D6FCA0F6<br />amavis[29009]: (29009-01) DSN: NOTIFICATION: Action:failed, LOCAL 554 Virus, spam level 0.000, <user1@example.com> -> <user2@example.com><br />amavis[29009]: (29009-01) SEND via SMTP: <> -> <user1@example.com>,ENVID=AM..20120120T160539Z@hostname 250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 10F1DCA246<br />amavis[29009]: (29009-01) Blocked INFECTED (Eicar-Test-Signature), [A.B.C.D] [A.B.C.D] <user1@example.com> -> <user2@example.com>, Message-ID: <4F19901F-00029ADE@host2>, mail_id: 0j6+cUa7qS0g, Hits: -, size: 1975, 127 ms</p>
<p>Then I replaced the $final_*_destiny settings by:</p>
<p>%final_destiny_by_ccat = (<br /> CC_VIRUS , D_DISCARD,<br /> CC_BANNED , D_PASS,<br /> CC_UNCHECKED , D_PASS,<br /> CC_SPAM , D_PASS,<br /> CC_BADH , D_PASS,<br /> CC_OVERSIZED , D_PASS,<br /> CC_CLEAN , D_PASS,<br /> CC_CATCHALL , D_PASS<br />);</p>
<p>And got the following loglines after sending an EICAR Virus:</p>
<p>amavis[29851]: (29851-01) LMTP::10024 /var/spool/amavis/tmp/amavis-20120120T180931-29851: <user1@example.com> -> <user2@example.com> SIZE=1974 BODY=7BIT Received: from hostname ([127.0.0.1]) by localhost (hostname [127.0.0.1]) (amavisd-new, port 10024) with LMTP for <user2@example.com>; Fri, 20 Jan 2012 18:09:31 +0100 (CET)<br />amavis[29851]: (29851-01) Checking: RK0jho4Lw9ha [A.B.C.D] <user1@example.com> -> <user2@example.com><br />amavis[29851]: (29851-01) run_av (ClamAV-clamd): /var/spool/amavis/tmp/amavis-20120120T180931-29851/parts INFECTED: Eicar-Test-Signature<br />amavis[29851]: (29851-01) virus_scan: (Eicar-Test-Signature), detected by 1 scanners: ClamAV-clamd<br />amavis[29851]: (29851-01) SEND via SMTP: <support@example.com> -> <user2@example.com>,ENVID=AM..20120120T170931Z@hostname 250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as E6356CA0F5<br />amavis[29851]: (29851-01) Blocked INFECTED (Eicar-Test-Signature), [A.B.C.D] [A.B.C.D] <user1@example.com> -> <user2@example.com>, Message-ID: <4F199F14-00029AF6@host2>, mail_id: RK0jho4Lw9ha, Hits: -, size: 1974, 96 ms</p>
<p>With the later settings amavisd has skipped sending the senders notification. Is that a feature or a bug?</p>
<p>Thanks for your help and attention.<br />Stefan</p>
<p>PS: I know that I'm not supposed to send notifications to probably faked sender addresses. But that's not the topic.</p>
<p><br /></p>
</body></html>