- 论坛徽章:
- 4
|
本帖最后由 3645636 于 2010-07-29 13:14 编辑
我已经安装好,clamav-milter, Sendmail搭配clamav-milter、milter-limit、spamass-milter,都已经正常工作,但是每当clamav-milter发现病毒,只是在邮件日志里发现病毒的报告,邮件也删除了!
如何,发现病毒,但不删除邮件呢?在clamav里如何配置? 如果是正常邮件就可以接收到!
Jul 29 13:01:58 mail sendmail[4227]: AUTH=server, relay=[192.168.0.1], authid=jazz, mech=PLAIN, bits=0
Jul 29 13:01:58 mail sendmail[4227]: o6T51wui004227: from=<jazz@mail.jazz.com>, size=382830, class=0, nrcpts=1, msgid=<4C510B60.10006@mail.jazz.com>, proto=ESMTP, daemon=MTA, relay=[192.168.0.1]
Jul 29 13:01:59 mail sendmail[4227]: o6T51wui004227: Milter add: header: X-Virus-Scanned: clamav-milter 0.96.1 at mail.jazz.com
Jul 29 13:01:59 mail sendmail[4227]: o6T51wui004227: Milter add: header: X-Virus-Status: Infected (Trojan.Hupigon-1815) #病毒名称
Jul 29 13:01:59 mail sendmail[4227]: o6T51wui004227: milter=clamav, quarantine=quarantined by clamav-milter
Jul 29 13:01:59 mail spamd[10344]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58127
Jul 29 13:01:59 mail spamd[10344]: spamd: processing message <4C510B60.10006@mail.jazz.com> for root:504
Jul 29 13:02:00 mail spamd[10344]: spamd: clean message (-1.0/10.0) for root:504 in 1.6 seconds, 388447 bytes.
Jul 29 13:02:00 mail spamd[10344]: spamd: result: . 0 - ALL_TRUSTED,TVD_SPACE_RATIO scantime=1.6,size=388447,user=root,uid=504,required_score=10.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58127,mid=<4C510B60.10006@mail.jazz.com>,autolearn=ham
Jul 29 13:02:00 mail spamd[10343]: prefork: child states: II #spamassassin也工作正常
Jul 29 13:02:00 mail sendmail[4227]: o6T51wui004227: Milter add: header: X-Spam-Status: No, score=-1.0 required=10.0 tests=ALL_TRUSTED,TVD_SPACE_RATIO\n\tautolearn=ham version=3.3.1
Jul 29 13:02:00 mail sendmail[4227]: o6T51wui004227: Milter add: header: X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mail.jazz.com
Jul 29 13:02:00 mail sendmail[4227]: o6T51wui004227: to=<jazz@mail.jazz.com>, delay=00:00:02, mailer=cyrusv2, pri=412830, quarantine=quarantined by clamav-milter, stat=quarantined
milter-limit也工作正常,我设置是5分钟一封信
Jul 29 13:05:32 mail sendmail[4233]: o6T55W6D004233: Milter: to=<jazz@jazz.com>, reject=450 4.7.1 192.168.0.1 has exceeded 1 message per 5 minutes
正常邮件原文
Return-Path: <jazz@mail.jazz.com>
Received: from mail.jazz.com ([unix socket])
by mail.jazz.com (Cyrus v2.3.7-Invoca-RPM-2.3.7-7.el5_4.3) with LMTPA;
Thu, 29 Jul 2010 13:07:11 +0800
X-Sieve: CMU Sieve 2.3
Received: from [192.168.0.1] ([192.168.0.1])
(authenticated bits=0)
by mail.jazz.com (8.13.8/8.13. with ESMTP id o6T578aR004237
for <jazz@jazz.com>; Thu, 29 Jul 2010 13:07:08 +0800
Message-ID: <4C510C96.20408@mail.jazz.com>
Date: Thu, 29 Jul 2010 13:07:34 +0800
From: jazz <jazz@mail.jazz.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.2.7) Gecko/20100713 Thunderbird/3.1.1
MIME-Version: 1.0
To: jazz <jazz@jazz.com>
Subject: =?GB2312?B?1f2zo9PKvP6y4srU?=
Content-Type: text/plain; charset=GB2312
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: clamav-milter 0.96.1 at mail.jazz.com
X-Virus-Status: Clean
X-Spam-Status: No, score=-1.0 required=10.0 tests=ALL_TRUSTED autolearn=ham
version=3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mail.jazz.com
正常邮件测试 正常邮件测试 正常邮件测试 |
|