Re: [cobalt-users] Spamming detected by Mailscanner?

[Larry Smith <lesmith@xxxxxxxxx>]

On Thursday 07 August 2003 12:02, Robert Fitzpatrick wrote:
> > Robert,
> > There was a recent post  (check the archives) telling how to change
> > something in mailscanner to stop them from bouncing to you. However, in
> > the meantime, do a message rule in your outlook express or other program,
> > to delete the message if the "topic is" or "message body is" rule. This
> > will immediately put them in your deleted folder so you won't have to
> > delete them.
> > Tom
>
> Yes, I setup a couple of recipes to delete the mail using Procmail. I
> was wondering if anyone knows how I can stop these originating messages.
> There seems to be a bunch of them and I'd rather avoid the process of
> them all together.
>
> --
> Robert

Robert,

 Under /home/opt/MailScanner/etc directory (raq4) is the mailscanner.conf file 
that controls how mailscanner works.  Several parameters are available there 
to control how and what mailscanner reports:

<QUOTE>
# Deliver messages with viruses removed to their original recipients
# if they came from a local address, or just delete them so no-one knows
# we have a virus outbreak on our site?
Deliver From Local Domains = yes

# Notify the senders of infected messages that they should check out
# their systems?
# This can be 3 different values:
#   yes = Notify all senders of viruses in mail they sent
#    no = Do not notify any senders of viruses in mail they sent
# local = Only notify senders of viruses in mail they sent if they
#         appear in the list of Local Domains
Notify Senders = no

# Notify the local postmaster when any infections are found?
Notify Local Postmaster = no
</QUOTE>

The second two (notify senders and notify local postmaster) are what will get 
you loads and loads of mail.  I had them turned on (yes) for a while, but did 
not feel like coping with the flood of mail at every "out-break" or new rash 
of Klez, Bugbear, etc...

-- 
Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx