Search results

Can one rewrite the script so that every positive mail get silently quarantined?

Mar 20 15:42:16 server postfix/smtpd[313887]: E78D345A0F31: client=dynamic[*.*.*.*], sasl_method=PLAIN, [email protected] Mar 20 15:42:16 server psa-pc-remote[787]: E78D345A0F31: from=<[email protected]> to=<[email protected]> Mar 20 15:42:17 server postfix/cleanup[313893]: E78D345A0F31...

I can still send the EICAR test pattern to my other account when I forward the message. Hitd thinks everything is fine.

As in my network I have only trustworthy people, in all other cases I would only discard never reject.

Right now your script runs since a few hours without problems, thank you for that. The only Problem for me seems to be the rejecting behavior. Best practice would be to, for authenticated users to reject but give them a message why, and for everything else to discard and give the recieving...

To my surprise drweb was disabled. I have enabled it with: plesk sbin drwebmng -e

-- -- An ExecStart= process belonging to unit drwebd.service has exited. -- -- The process' exit code is 'exited' and its exit status is 255. Mar 16 17:04:51 server drwebd[2003346]: Dr.Web (R) daemon for Linux/Plesk Edition v6.0.2.1 Mar 16 17:04:51 server drwebd[2003346]: Copyright (c) Igor...

Key file: /opt/drweb/drweb32.key - Key file was not found! (No such file or directory) Oh I thought this was part of the package. So I have to buy it? Strange

cat eicar-signature.txt| drwebdc -orv - [16:27:00] dwlib: fd: connect() failed - Connection refused dwlib: tcp: connecting to 127.0.0.1:3000 - failed dwlib: cannot create connection with a...

I don't know, this seems to reject anything at the moment and I don't even think rejecting is the best method, it should be silently discarded or quarantined. I think I maybe try to use another approach with amavisd.

I used it with these permissions now. drwxrwx--- drweb popuser hitd-virus-handler Now the script complains about drweb can't connect...

What permissions should /var/spool/hitd-virus-handler have?

Mar 16 13:49:12 server psa-pc-remote[1579100]: A289045A4976: hitd-virus-handler: stderr: LOG HITDVIRUS spool_dir /var/spool/hitd-virus-handler does not exist and can not be created Mar 16 13:49:13 server psa-pc-remote[1579100]: A289045A4976: hitd-virus-handler: stderr: LOG HITDVIRUS result: SKIP...

I have now something like this in my list. | X | X | 45 | all | virushandler | global | before-queue | | X | | 4 | all-recipients | add-from | global | before-sendmail | | X | | 10 |...

Well I tried the commands from your file but no change in mail handling also no error message, also can't see a virushandler with --list plesk sbin mail_handlers_control --add --priority=45 --name=virushandler --queue=before-queue --type=global --executable=/usr/local/sbin/hitd-virus-handler...

BTW I think the new path is /usr/local/psa/admin/sbin and you can also call this through 'plesk sbin COMMANDNAME'

So I have to enable this for sending and recivieng for each domain? That's much I have more than 50 domains.

To be honest I don't even know how the right way to implement this script. And what lies in /usr/local/etc/hitd-virus-handler.d/ ?

I just did this on my system, got this from some other tutorial: apt -y install software-properties-common apt-key adv --fetch-keys 'https://mariadb.org/mariadb_release_signing_key.asc' add-apt-repository 'deb [arch=amd64] Index of /mariadb/repo/10.6/ubuntu/ focal main' apt update ; apt upgrade...

But with 10.6 you maybe need to add this to your server config Because some apps maybe still use compressed as standard