Hi, Amavis is collecting quite a number if emails in /var/spool/amavis/virusmails. (Running postfix on Suse 10.0 retail). These are all .gz format, most contain .gif file attachments. There are about 20MB of emails in this directory to date, almost 1,000 files. All .gz file names start with "spam-.gz" except for 3 that start with "banned" and one with "virus". Can I just delete these files, without any other consequence? If this is important, I'm also running spamd, separately. Many thanks Jim
On Saturday 11 March 2006 5:50 pm, Jim Flanagan wrote:
Hi,
Amavis is collecting quite a number if emails in /var/spool/amavis/virusmails. (Running postfix on Suse 10.0 retail). These are all .gz format, most contain .gif file attachments. There are about 20MB of emails in this directory to date, almost 1,000 files. All .gz file names start with "spam-.gz" except for 3 that start with "banned" and one with "virus". Can I just delete these files, without any other consequence?
If this is important, I'm also running spamd, separately.
Many thanks
Jim
Yes, I run a cron job myself to zap them..... /usr/bin/find /var/spool/amavis/virusmails/ -mtime +10 -exec rm -f {} \; Scott -- O! Plus! Perge! Aio! Hui! Hem! POPFile, the OpenSource EMail Classifier http://popfile.sourceforge.net/ Linux 2.6.11.4-21.11-default x86_64 SuSE Linux 9.3 (x86-64)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Saturday 2006-03-11 at 19:50 -0600, Jim Flanagan wrote:
Amavis is collecting quite a number if emails in /var/spool/amavis/virusmails. (Running postfix on Suse 10.0 retail). These are all .gz format, most contain .gif file attachments. There are about 20MB of emails in this directory to date, almost 1,000 files. All .gz file names start with "spam-.gz" except for 3 that start with "banned" and one with "virus". Can I just delete these files, without any other consequence?
It is a problem with amavis, there is no easy way to administer the quarantine dir :-( I configured amavis so that, instead of storing the banned and maybe virus loaded email in a place where I don't see then, I set it to "pass", with addr extension enabled: @addr_extension_virus_maps = ('virus'); @addr_extension_spam_maps = ('spam'); @addr_extension_banned_maps = ('banned'); @addr_extension_bad_header_maps = ('badh'); $recipient_delimiter = '+'; # undef disables address extensions altogether # when enabling addr extensions do also Postfix/main.cf: recipient_delimiter=+ ... $final_virus_destiny = D_BOUNCE; $final_banned_destiny = D_PASS; $final_bad_header_destiny = D_PASS; $banned_files_quarantine_method = undef; (the virus email doesn't really bounce, I have a redirect clause in /etc/postfix/access, and any way, I dissabled antivirus checking) Therefore, email with banned parts end up in my mail, but in a diferent folder, so that I can check if it is some "friend" of mine (like corporate xmasses in .exe form), or simply malware. .procmailrc: :0 * ^TOcer\+banned@nimrodel.valinor $HOME/Mail/in_banned :0 * ^Delivered-To: cer\+banned@(localhost.nimrodel.valinor|nimrodel.valinor) $HOME/Mail/in_banned After all, windows executables can not damage me in linux ;-)
If this is important, I'm also running spamd, separately.
Me too. I dissabled spam checking in amavis. By the way, I guess that those "spam-.gz" files you get are because you run spam checks also in amavis. You could dissable that one as you are running spamd, which is way more effective, and save resources. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFEE/5TtTMYHG2NR9URApnjAJ9vCeFNo2TKQBOVg2kAaXwOTldVRgCbBRS/ 8iNsGuJcg19ZVC3WMmhC+RY= =o3/T -----END PGP SIGNATURE-----
participants (3)
-
Carlos E. R. -
Jim Flanagan -
Scott Leighton