clamav-users February 2008 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [Clamav-users] How to tell Clam about MX serve

Re: [Clamav-users] How to tell Clam about MX servers?

From: Leonardo Rodrigues Magalhães <leolistas_at_nospam>
Date: Wed Feb 13 2008 - 17:26:57 GMT
To: ClamAV users ML <clamav-users@lists.clamav.net>

Jason Bertoch escreveu:
> On Tuesday, February 12, 2008 10:00 PM Steven Stern wrote:
>
>
>> Clam is reporting that one of my MX servers is a 'virus' source. How
>> do I tell it that the mailhop.org server is innocent and that the
>> source of the mail is farther up the line?
>>
>> The infected machine is likely to be here:
>> from localhost ([127.0.0.1] helo=mhfr-05-bos.mailhop.org)
>> ~ by mhfr-05-bos.mailhop.org with esmtp (Exim 4.68)
>> ~ (envelope-from <generatedmail.id22740069BIB@hsbc.com>)
>> ~ id 1JP4o8-000DxP-Uk
>> ~ for subscribed-lists@sterndata.com; Tue, 12 Feb 2008 18:45:01
>> -0500
>>
>>
>
> You can set CLAMAV_FLAGS with --dont-blacklist=IP[,IP...]
>

    Just to make things clear, CLAMAV_FLAGS is a clamav-milter option, not clamav. Again, clamav knows NOTHING about IP addresses. clamav scan only files. Any option needed for whitelist something needs to be passed to the software used in the middle of clamav and MTA. On this case, clamav-milter. -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes@solutti.com.br My SPAMTRAP, do not email it

_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html