On 23 Nov 2004, Eric Eric wrote:
> Can anyone tell me how to configure the exiscan addon?
Read the Exiscan documentation at
http://duncanthrax.net/exiscan-acl/
and/or check my HOWTO at
http://www.timj.co.uk/linux/exim.php - PDF or a
slightly dodgy HTML version available.
> I looked around but couldn't find much on it - or I looked in the wrong
> places. I'd like the server to NOT email senders of viruses telling them
> that their message was rejected. But I would like a message sent to the
> recipient stating why the message was rejected. So they can contact the
> sender if needed.
I'd strongly advise against this. In almost all cases, the virus will not
be a "real mail" with some infected attachment, but just an outright
virus-generated mail, with a forged sender. So :
a) it won't be useful to the recipient
b) it will fill up their inbox and waste their time
c) there is a strong likelihood that your recipients will email the
(forged) sender saying moronic things like "why did you send me a virus?"
and/or "please disinfect your mail and resend", which has the same effect
as collateral spam except it's even harder for the innocent joe-jobbed
victim to block.
If you need to "prove" you're doing something useful, just generate some
aggregate statistics. (e.g. "we rejected X viruses this week for recipient
Y")
Tim
