[clamav-users] Clamav-milter finds postive, goes to hold queue

[Grant Taylor]

On 2/24/21 9:56 AM, Joe Acquisto-j4 wrote:
> Thanks.  Workable.

*nod*

> Ah.  Well I did not mean to suggest the milter should "manage" 
> the postfix queue at all, but could alter any "directive" as to 
> disposition.   The log messages I noticed, for "infected" mail 
> (/var/log/mail) seem to suggest postifix was dealing with these in 
> a way "directed" by the milter.

Yes, milters tell the MTA what they think should be done with the message:

  - Known good - you should really accept this message
  - Unknown - let something else decide
  - Known bad - you should really reject this message
  - hold / quarantine - let something else review messages later

But that's just what the milter thinks of the message.  The MTA is 
ultimately what decides what to do with the message, often influenced by 
milters / RBLs / etc.

> Perhaps these are "distinctions without a difference" brought about 
> my own, limited familiarity with the tech and terms.

Think about it this way.  The MTA is the bouncer at the entrance to a 
club called "The Mail Server"  --  I hear Sim City style cheering for 
the Mayor's house.  --  and the bouncer reads from a list to see who is 
allowed in or not.  The milter will assess something about the person(s) 
requesting entry and scribble a note on the list the bouncer (the MTA) 
reads in near real time.  The MTA (the bouncer) does the enforcement. 
The milter (management) updates the list.

> Thanks agian

You're welcome.



-- 
Grant. . . .
unix || die

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4013 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210224/f98b8007/attachment.bin>