difference between $final_*_destiny and %final_destiny_by_ccat

Stefan Jakobs stefan at localside.net
Fri Jan 20 18:20:40 CET 2012


Hello list,  

I had these settings in my /etc/amavisd.conf (amavisd-new-2.6.6; Perl version
5.010000):  

$final_virus_destiny      = D_DISCARD;
$final_banned_destiny     = D_PASS;
$final_spam_destiny       = D_PASS;
$final_bad_header_destiny = D_PASS;
$warnvirussender = 1;
$warnvirusrecip = 1;  

And got these loglines after sending an EICAR Virus:  

amavis[29009]: (29009-01) LMTP::10024
/var/spool/amavis/tmp/amavis-20120120T170538-29009: <user1 at example.com> ->
<user2 at example.com> SIZE=1975 BODY=7BIT Received: from hostname ([1270.0.1])
by localhost (hostname [127.0.0.1]) (amavisd-new, port 10024) with LMTP for
<user2 at example.com>; Fri, 20 Jan 2012 17:05:38 +0100 (CET)
amavis[29009]: (29009-01) Checking: 0j6+cUa7qS0g [A.B.C.D]
<user1 at example.com> -> <user2 at example.com>
amavis[29009]: (29009-01) run_av (ClamAV-clamd):
/var/spool/amavis/tmp/amavis-20120120T170538-29009/parts INFECTED:
Eicar-Test-Signature
amavis[29009]: (29009-01) virus_scan: (Eicar-Test-Signature), detected by 1
scanners: ClamAV-clamd
amavis[29009]: (29009-01) SEND via SMTP: <support at example.com> ->
<user2 at example.com>,ENVID=AM..20120120T160539Z at hostname 250 2.0.0 from
MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 08D6FCA0F6
amavis[29009]: (29009-01) DSN: NOTIFICATION: Action:failed, LOCAL 554 Virus,
spam level 0.000, <user1 at example.com> -> <user2 at example.com>
amavis[29009]: (29009-01) SEND via SMTP: <> ->
<user1 at example.com>,ENVID=AM..20120120T160539Z at hostname 250 2.0.0 from
MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 10F1DCA246
amavis[29009]: (29009-01) Blocked INFECTED (Eicar-Test-Signature), [A.B.CD]
[A.B.C.D] <user1 at example.com> -> <user2 at example.com>, Message-ID:
<4F19901F-00029ADE at host2>, mail_id: 0j6+cUa7qS0g, Hits: -, size: 1975, 127 ms
 

Then I replaced the $final_*_destiny settings by:  

%final_destiny_by_ccat = (
 CC_VIRUS     ,       D_DISCARD,
 CC_BANNED    ,       D_PASS,
 CC_UNCHECKED ,       D_PASS,
 CC_SPAM      ,       D_PASS,
 CC_BADH      ,       D_PASS,
 CC_OVERSIZED ,       D_PASS,
 CC_CLEAN     ,       D_PASS,
 CC_CATCHALL  ,       D_PASS
);  

And got the following loglines after sending an EICAR Virus:  

amavis[29851]: (29851-01) LMTP::10024
/var/spool/amavis/tmp/amavis-20120120T180931-29851: <user1 at example.com> ->
<user2 at example.com> SIZE=1974 BODY=7BIT Received: from hostname ([1270.0.1])
by localhost (hostname [127.0.0.1]) (amavisd-new, port 10024) with LMTP for
<user2 at example.com>; Fri, 20 Jan 2012 18:09:31 +0100 (CET)
amavis[29851]: (29851-01) Checking: RK0jho4Lw9ha [A.B.C.D]
<user1 at example.com> -> <user2 at example.com>
amavis[29851]: (29851-01) run_av (ClamAV-clamd):
/var/spool/amavis/tmp/amavis-20120120T180931-29851/parts INFECTED:
Eicar-Test-Signature
amavis[29851]: (29851-01) virus_scan: (Eicar-Test-Signature), detected by 1
scanners: ClamAV-clamd
amavis[29851]: (29851-01) SEND via SMTP: <support at example.com> ->
<user2 at example.com>,ENVID=AM..20120120T170931Z at hostname 250 2.0.0 from
MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as E6356CA0F5
amavis[29851]: (29851-01) Blocked INFECTED (Eicar-Test-Signature), [A.B.CD]
[A.B.C.D] <user1 at example.com> -> <user2 at example.com>, Message-ID:
<4F199F14-00029AF6 at host2>, mail_id: RK0jho4Lw9ha, Hits: -, size: 1974, 96 ms 


With the later settings amavisd has skipped sending the senders notification.
Is that a feature or a bug?  

Thanks for your help and attention.
Stefan  

PS: I know that I'm not supposed to send notifications to probably faked
sender addresses. But that's not the topic.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20120120/cdc9c797/attachment.html>


More information about the amavis-users mailing list