[clamav-users] clamav-milter reject and quarantine?

[Noel Jones]

It is not a violation of protocol to reject a message during SMTP,
and save a copy for forensic inspection.  Be aware it is likely to
cause confusion if you later deliver that message.

clamav-milter does not currently have a reject+inspect option, but
it probably wouldn't be much effort to add.  Open a bug/feature request.


  -- Noel Jones



On 2/18/2016 11:21 AM, Michael Grant wrote:
> I don't want to deliver the message, I want to quarantine it (like put it
> in a directory somewhere), and then refuse it at the milter/smtp level.
> There is not a violation of the protocol here.
> 
> On 18 February 2016 at 17:59, Dennis Peterson <dennispe at inetnw.com> wrote:
> 
>> What you want to do is best done using the local mailer and not SMTP.
>> Technically and literally you have accepted the message in your scheme and
>> are therefore responsible for delivery. You can't both send a reject and
>> deliver the mail - it violates the protocol and integrity of the messaging
>> system.
>>
>> dp
>>
>>
>> On 2/18/16 5:14 AM, Michael Grant wrote:
>>
>>> Using clamav-milter, is there anyway to reject virus infected messages AND
>>> put them into a quarantine directory?
>>>
>>> The reason I want to do this is that I want to reject virus messages while
>>> the smtp connection is still alive, but after the fact, if there was a
>>> false positive, I'd like to be able to send the message on through anyway
>>> after the fact.
>>> _______________________________________________
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>>
>>> http://www.clamav.net/contact.html#ml
>>>
>>
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>>
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
>