[Rspamd-Users] Antivirus possible actions

Martin Brampton martin at black-sheep-research.com
Thu Oct 29 15:26:40 UTC 2020

On 29/10/2020 13:35, Carsten Rosenberg wrote:
> On 29.10.20 13:54, Martin Brampton via Users wrote:
>> On 22/10/2020 10:08, J. Echter wrote:
>>> https://rspamd.com/doc/configuration/metrics.html
>>> Am 22.10.20 um 10:57 schrieb Martin Brampton via Users:
>>>> In /etc/rspamd/local.d/antivirus.conf an action can be specified, by
>>>> default "reject".
>>>> What alternative actions are available?
>> Hmm, I thought that solved the matter. But if I set the action in
>> antivirus.conf to "discard" then the email is delivered and shows in the
>> rspamd history as a normal email. If I set it to "discard" it isn't
>> delivered, and it shows as "reject" in the rspamd history. So discard
>> seems not to work in this context.
> The only possible option here is "reject". Maybe the option name is a
> bit misleading here.
> If you really want to discard viruses (I would always reject them
> pre-queue), you could enable the discard action and use the force_action
> plugin.
> https://rspamd.com/doc/configuration/metrics.html
> https://rspamd.com/doc/modules/force_actions.html
> --
> Carsten

Thanks, I don't really want to spend time on more than simple 
configuration options. The reason for starting this query was that 
"reject" can result in the mail relay that transferred the bad email 
referring it to senders and/or relay manager. I don't see emails with 
viruses at all often, so maybe I'll just accept that.

More information about the Users mailing list