[Rspamd-Users] Rspamd does not reject virus mails

[Danjel Jungersen]

On 11-04-2025 10:47, Ralf Kania via Users wrote:
> Hello Benny,
>
> I use this script here to copy holded mails to qurantine folder, and
> afterwards it executes
>   postsuper -d queue-id
> #### script ###
> #!/bin/bash
> QUARANTINEDIR="/var/quarantine"
> # 2022-11-03 #
> DATE="`date +%F`"
> cd $QUARANTINEDIR
> # Anzahl Mails in der Hold Queue #
> COUNT_MAILS="`ls -l /var/spool/postfix/hold/|wc -l`"
> # wenn Folder von heute schon existiert, wechsel rein #
> if  [ -d "$DATE" ]
>          then
>          cd $DATE
>          cp  /var/spool/postfix/hold/* .
>
> # wenn es den Folder noch nicht gibt, erstell ihn und wechsel rein #
>          else
>          mkdir $DATE
>          cd $DATE
>          cp  /var/spool/postfix/hold/* .
> fi
> /usr/sbin/postsuper -d ALL hold
> ### LOG ###
> echo -e "DATUM: $DATE\nAnzahl Mails:  $COUNT_MAILS\n" >>
> /scripts/quarantine-to-folder/moved.log
> ############

Don't you risk removing mails from the queue that have not been copied?

Mails that arrive after the "cp" but before the "postsuper -d"

??
Danjel

>
> Regards
> Ralf
>
> -----Ursprüngliche Nachricht-----
> Von: Users<users-bounces at lists.rspamd.com> Im Auftrag von Benny Pedersen
> via Users
> Gesendet: Donnerstag, 10. April 2025 17:02
> An:users at lists.rspamd.com
> Cc: Benny Pedersen<me at junc.eu>
> Betreff: Re: [Rspamd-Users] Rspamd does not reject virus mails
>
> Ralf Kania via Users skrev den 2025-04-10 16:09:
>> Hello Danjel,
>>
>> when you set the option
>> quarantine_on_reject = true;
>> Than the spam mails will not rejected. They will be moved to the
>> postfix hold queue.
>> Afterwards you can move it via a script to /var/quarantine as example
>> to check false positives.
> dont touch internal data in postfix quede
>
> use postcat queue-id and possible postsuper -d queue-id
>
> just heads up there
>
> /var/quarantine is imho not internal data on postfix, only saying be
> carefull
>
>
>
-- 
Med venlig hilsen/Kind regards
Danjel Jungersen
Mail: danjel at jungersen.dk
Mobile: +45 20 42 20 11

Jungersen Grafisk ApS,
Holsbjergvej 39, DK-2620 Albertslund,
Denmark.
Tel: +45 43 64 10 00

WEBSHOP: PRINTLIGHT.DK <https://www.printlight.dk> | WWW.JUNGERSEN.DK 
<https://www.jungersen.dk>

Logo <https://www.jungersen.dk>