| Main Archive Page > Month Archives > clamav-users archives |
Jason Bertoch escreveu:
> On Tuesday, February 12, 2008 10:00 PM Steven Stern wrote:
>
>
>> Clam is reporting that one of my MX servers is a 'virus' source. How
>> do I tell it that the mailhop.org server is innocent and that the
>> source of the mail is farther up the line?
>>
>> The infected machine is likely to be here:
>> from localhost ([127.0.0.1] helo=mhfr-05-bos.mailhop.org)
>> ~ by mhfr-05-bos.mailhop.org with esmtp (Exim 4.68)
>> ~ (envelope-from <generatedmail.id22740069BIB@hsbc.com>)
>> ~ id 1JP4o8-000DxP-Uk
>> ~ for subscribed-lists@sterndata.com; Tue, 12 Feb 2008 18:45:01
>> -0500
>>
>>
>
> You can set CLAMAV_FLAGS with --dont-blacklist=IP[,IP...]
>
Just to make things clear, CLAMAV_FLAGS is a clamav-milter option, not clamav. Again, clamav knows NOTHING about IP addresses. clamav scan only files. Any option needed for whitelist something needs to be passed to the software used in the middle of clamav and MTA. On this case, clamav-milter. -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes@solutti.com.br My SPAMTRAP, do not email it
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html