Exim message for virus

M

Mangas23

Verified User
Joined
Aug 31, 2006
Messages
104
Hello, I have a little problem.
I have install exim with clamav, all work fine but I just find something strange:

When someone outside my user send mail with virus to my user, mail are rejected and external user had this email:
This is the mail system at host smtp2-g21.free.fr.

I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can delete your own text from the attached returned message.

The mail system

<[email protected]>: host mail.server.net[87.98.251.121] said: 550-This
message contains a virus or other harmful content 550
(Eicar-Test-Signature) (in reply to end of DATA command)
Click to expand...

So all are ok but when my user send mail with virus to another of my user or external user, message are not the same:
Certains des destinataires ou tous les destinataires n'ont pas reçu votre message.

Objet : test
Date : 17/04/2010 15:23

Impossible de contacter le(s) destinataire(s) suivant(s) :

'[email protected]' le 17/04/2010 15:23
550 (Eicar-Test-Signature)
Click to expand...

Virus are detected and mail blocked but message to user send mail don't explain why. (And is in french I don't know why)
Can someone tell me why and how I can modify this ? I think the second message come from my mail client but I don't understand why I dont have message:
said: 550-This
message contains a virus or other harmful content 550
(Eicar-Test-Signature) (in reply to end of DATA command)
Click to expand...

thanks.
 
Last edited:
OK I found an alternate solution to resolve my problem, in exim.conf I modify this:
check_message:
deny message = This message contains malformed MIME ($demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
deny message = This message contains a virus or other harmful content ($malware_name)
demime = *
malware = *
deny message = This message contains an attachment of a type which we do not accept (.$found_extension)
demime = bat:com:pif:prf:scr:vbs
warn message = X-Antivirus-Scanner: Clean mail though you should still use an Antivirus
accept
Click to expand...
by this:
check_message:
deny message = This message contains malformed MIME (malformed_MIME:$demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
deny message = This message contains a virus or other harmful content (virus_in_message:$malware_name)
demime = *
malware = *
deny message = This message contains an attachment of a type which we do not accept (attachment_not_allow:.$found_extension)
demime = bat:com:pif:prf:scr:vbs
warn message = X-Antivirus-Scanner: Clean mail though you should still use an Antivirus
accept
Click to expand...
 
Last edited:
I've edited your reply to get rid of the smilies; please when your post ends up with smileys, edit it, choose advanced, and turn off smilies, so the rest of us can see what you meant. :)

Jeff
 
Yes I thinks it's a good idea.
But I don't understand why outlook 2007 cut server's message, it take only message beetwen "()" and whith no space.
 
You must log in or register to reply here.
Back
Top