[clamav-users] Structured.CreditCardNumber bounce

Vladislav Kurz vladislav.kurz at webstep.net
Fri Apr 1 15:01:50 UTC 2016


On Friday 01 of April 2016 Rob McKennon <rmckennon at monetra.com> wrote:

> Hello,
> 
>     One of the reasons we use clamav is to not accept emails with credit
> card numbers.  And it works great to bounce the message back to the
> sender.  However, according to PCI, sending the original message back
> with the same credit card numbers they sent us, is just as bad as them
> sending it to us in the first place.
> 
>     Is there a way to tell clamav to send the bounce message with the
> "INFECTED: Heuristics.Structured.CreditCardNumber" data, but NOT include
> the original email?

Hi,

this is not setting of clamav itself. It should be configurable in SMTP server 
or its antivirus interface like Amavis. Clamav just decides if the file is 
infected or not. It is the SMTP server that decides what is sent back.

-- 
Best Regards
        Vladislav Kurz



More information about the clamav-users mailing list