Deleting emails with viruses

[André Rodier]

On 2018-04-30 19:19, Benny Pedersen wrote:
> André Rodier skrev den 2018-04-30 16:27:
> 
>> You can then drop or bounce them, and put the file in quarantine.
> 
> clamsmtp cant reject, so it cant bounce to real sender, it would be
> possible it would go to forged sender, dont do that unless clamsmtp
> use used in prequeue mta stage, but since clamsmtp cant reject it
> would not work anyway
> 
> so all clamsmtp can do is to tag only in prequeue stage, and in mta
> stage reject based on results in eq postfix header test
> 
> but i think this is more complicated then use clamav-milter where it
> can reject or quarantine virus

Yes, by default, the clamsmtp documentation recommend to not reject the
messages, and to drop them. I set it up like this.

Clam SMTP support before and *after* queue, and recommend the latter:

> Postfix supports filtering mail through a filter that acts like an SMTP 
> server. This is how clamsmtp was designed. Postfix supports 
> before-queue and after-queue filters. Before-queue filters make a poor 
> choice for anti-virus scanners so this document will describe the 
> latter. For more details on why and how this all works, read the above 
> links on the Postfix site.

Source: http://thewalter.net/stef/software/clamsmtp/postfix.html