Get rid of BANNED and VIRUS alert notifications

Discussion in 'Installation/Configuration' started by datahellas, Aug 3, 2010.

  1. datahellas

    datahellas New Member

    I use ISPConfig3 with postfix, amavis and clamd. I have set in amavisd.conf messages marked as VIRUS, SPAM and BANNED to be deleted (discard) but I still get email alert notifications. How I can stop getting notifications for such messages?

    in amavisd.conf:

    $final_virus_destiny = D_DISCARD;
    $final_spam_destiny = D_DISCARD;
    $final_banned_destiny = D_DISCARD;
    $final_bad_header_destiny = D_PASS;

    The mail notifications I get have subject like the following:

    BANNED contents (.exe,.exe-ms,report.document.doc.exe) in mail FROM [] <[email protected]>
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Remove your email address from the banned admin, virus admin and bad header admin fields in the spamfilter policy.
  3. datahellas

    datahellas New Member

    Stop getting spam notifications

    I have not entered forward e-mail in my spamfilter policy (see attached screenshot). I checked it for the Normal level which I use globally and for the other spamfilter levels too. All email fields are empty. Why I still get those notifications?

    Attached Files:

  4. till

    till Super Moderator Staff Member ISPConfig Developer

    I'am not talking about forward fields, I talked abou the admin fields, they are on the other tab.
  5. datahellas

    datahellas New Member

    The "Other" tab is also empty! See attached screenshot.

    Attached Files:

  6. till

    till Super Moderator Staff Member ISPConfig Developer

    These messages are not sent by a default configuration, so you must have entered your email address somewhere. The only way to activate this in amavisd is to enter the email address in the admin fields. So please check all policys again. If you did any manual modifications to the amavisd configuration files, then check these too if there is your email address somwhere.
  7. datahellas

    datahellas New Member

    OK, I found something in amavid.conf but it is the default options. The only thing I changed is the value of the $mydomain variable.

    $mydomain = "";

    And some lines bellow:

    $virus_admin = "virusalert\@$mydomain";
    $mailfrom_notify_admin = "virusalert\@$mydomain";
    $mailfrom_notify_recip = "virusalert\@$mydomain";
    $mailfrom_notify_spamadmin = "spam.police\@$mydomain";
    $mailfrom_to_quarantine = ''; # null return path; uses original sender if undef

    So, what to do? Comment them? Empty those values? For example set:
    $virus_admin = "";

    All notifications are mailed to [email protected] and I get them from a "catch all" e-mail I have. I get about 100 messages per day which is very annoying.
    Last edited: Aug 3, 2010

Share This Page