List Info

Thread: virus notification for recipients




virus notification for recipients
country flaguser name
Italy
2007-08-17 14:17:04
Hi

I've the followinf scenario:

1) global quarantine based on domain (no user account
created)
2) virus policy is to quarantine the mail

My question is: is it possible to send a virus notification
to the 
recipients , assuming they are local ?

Thx in advance,

Have fun,
Davide
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: virus notification for recipients
country flaguser name
Canada
2007-08-17 14:40:54
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

davide bozzelli wrote:

> I've the followinf scenario:
> 
> 1) global quarantine based on domain (no user account
created)
> 2) virus policy is to quarantine the mail
> 
> My question is: is it possible to send a virus
notification to the 
> recipients , assuming they are local ?

Yes, you can set $warnvirusrecip = 1 in your amavisd.conf
file, and
restart amavisd-maia after making the change.

That said, do you really want to annoy your users every time
a
malware-laden email arrives?  This is particularly annoying
if your
virus scanner catches phishes and scams (like ClamAV does),
since it
means a typical user might receive a few hundred of these a
day.

A final point about viruses/malware, though--I haven't found
anything
worth recovering in a virus quarantine for over four years
now.  It used
to be that viruses were designed to tack themselves on to
legitimate
mail, such that you might actually want to recover and
repair such an
item, but over the past five years or so all the malware out
there has
been bot-spew--the entire malware-infected email is
generated by the
bots, since waiting for humans to mail something is
inefficiently slow
as a means of mass-distributing malware.

What this means is that the false positive rate for
viruses/malware has
dropped so close to 0 that it's effectively 0, so many sites
don't even
bother quarantining them anymore, they just discard them. 
Your users
are far more likely to be concerned about false positives in
the /spam/
quarantine, or the banned attachment quarantine, or the
invalid headers
quarantine.

If you were willing/able to create Maia accounts for your
users, though,
you might prefer instead to use Maia's quarantine digest
feature, which
can be configured to send users a periodic email that
contains a list of
the items being currently quarantined on their behalf, with
links in the
email to view/release/confirm them.  That way your users get
bothered
less often, at least.

- --
Robert LeBlanc <rjlrenaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamail
guard.com/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGxfnFGmqOER2NHewRAj8lAJ0TCObd/90/Ef2OFzFpxp+mPuTQ2gCf
fFbY
mDwfBDZtiZEGiEpTxM/EsOg=
=B9Vq
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: virus notification for recipients
country flaguser name
Italy
2007-08-17 14:54:43
Robert LeBlanc ha scritto:
>
> Yes, you can set $warnvirusrecip = 1 in your
amavisd.conf file, and
> restart amavisd-maia after making the change.
>   
Thx Robert .

I saw if i DON'T add the domain on maia interface I need
also to use 
warn_offsite .

> That said, do you really want to annoy your users every
time a
> malware-laden email arrives?  This is particularly
annoying if your
> virus scanner catches phishes and scams (like ClamAV
does), since it
> means a typical user might receive a few hundred of
these a day.
>
>   
You're right ,  but not all people (an example is  my
client) wants to 
give to any of his users the possibility to use
the quarantine area, cause (especially in italy) their users
are not 
very skilled , and they don't want to skill them .

Basically they wants a global quarantine area , supervised
by an admin, 
who take care of all the
the delete/release/ tasks .

That said, they simply wants to inform users when a virus is
found .

I'm not agree with them , cause the user's managed
quarantine unloads 
the admin's work, but for example
, considering again those stupid user, give him the ability
to train the 
bayes stuff could create problem .

Thx for help again,

Have fun,
Davide



_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

[1-3]

about | contact  Other archives ( Real Estate discussion Medical topics )