Hello.
I just install a mail server with exim4.3, exiscan and SA-exim (Debian/Sarge).
I use SA-Exim to filter spam with SpamAssassin and exiscan to filter malware.
All work (fast) clean. ;-)
Just a little detail and i'll be very happy!
I would for malware identified mail that:
1. The original mail go in a virus specific directory on the server.
2. The recipient receive a warn mail that inform him that an infected mail was
stopped on the server.
3. The delivery of the original mail is stopped
To do that; i wrote...
...in DATA ACL:
warn message = X-Redirect-To:virusbox@$primary_hostname
demime = *
malware = *
...In the "System_filter" file:
if "${if def:header_X-Redirect-To: {there}}" is there
then
save /var/spool/virusmails
mail
to $header_To:
subject "VIRUS ALERT"
text "Our viruschecker found a virus in a mail to you.\n\
Delivery of the email was stopped!\n\
Please, contact your system administrator for details."
seen
endif
But, there is allways message about problem with the
system_filter_reply_transport.
I saw what system_filter_reply_transport is in the Exim doc, but i don't
understand how to define it and ho to use it.
I'll be very grateful if somebody would to give me explanations or a real
example with my config.
Regards,
--
E.Bullier
<-------- extract of the exim4/mainlog
2004-10-18 14:05:15 1CJWGI-0006qv-IS <= marcel@??? H=(lea30.eai.lan)
[192.168.0.30] P=esmtp S=1669 id=200410181405.07584.marcel@???
2004-10-18 14:05:15 1CJWGI-0006qv-IS original recipients ignored (system
filter)
2004-10-18 14:05:15 1CJWGI-0006qv-IS == >@ <system-filter> routing defer (-1):
system_filter_reply_transport is unset
2004-10-18 14:05:15 1CJWGI-0006qv-IS => admin <system-filter> R=local_user
T=cyrus_delivery
<-------- extract of the exim4/mainlog
