[Maia-users] Bad attachments not always quarantained

[Robert LeBlanc]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Koenraad Lelong wrote:

> What I want is that all mails with bad attachments are quarantained. 
> Then some administrator can release these if they are expected and from 
> known senders.

In other words, inbound quarantining of mail containing banned file
attachments.  This is a per-user feature, so any quarantined items would
end up in the quarantines of the individual users, which they themselves
could release if desired.  You seem to be looking for a site-wide
quarantine that only an administrator can manage.  That sort of
functionality is not supported by Maia on a per-mail-type basis, it's
all or nothing.

What I mean is that if you don't want ordinary users to be able to
release mail from their quarantines, don't give them Maia accounts at
all.  That way the mail they receive will default to the @domain
account, which only a domain administrator (and the super-administrator)
can manage.  This applies to viruses, spam, banned attachments, and bad
headers, though--you can't do this for just one quarantine type.


> My problem was that a user complained about "lost" mail that was 
> expected to have a "bad" attachment. Then I looked at the quarantaine to 
> discover there was nothing in the quarantaine.
> I didn't have complaints recently, so maybe there was another problem. 
> But I'll keep an eye on this.

If it was flagged for having a banned attachment type, it should have
ended up in the user's personal quarantine (assuming that the user had
enabled banned attachment filtering for his address of course).  If
nothing appeared in his quarantine, then most likely it was not flagged
for having a banned attachment type.  Your amavisd-maia log (or maillog)
should verify this--grep for "BANNED".


> P.S. Is there an easy way to notify a local recipient that there is mail 
> with a "bad" attachment (without sending the attachment) ? Of course 
> that mail should have passed the virus checks.

You can enable recipient notifications in your amavisd.conf file, by
setting $warnbannedrecip = 1.  Alternatively, if your users enable
Maia's digest feature, it will notify them of the contents of all of
their quarantines at whatever intervals they specify.

- --
Robert LeBlanc <rjl at renaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamailguard.com/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGHxSEGmqOER2NHewRAiHPAJ9ge9Hv6iaHAYlLjfCbfkZk9TIVpACfaN8W
Q1cx5zg5XrW+FCyn1Kgs4o0=
=KQ/I
-----END PGP SIGNATURE-----