[Rspamd-Users] Rspamd does not reject virus mails

[Ralf Kania]

Hello Danjel,



-----Ursprüngliche Nachricht-----
Von: Users <users-bounces at lists.rspamd.com> Im Auftrag von Danjel Jungersen via Users
Gesendet: Freitag, 11. April 2025 12:39
An: users at lists.rspamd.com
Cc: Danjel Jungersen <danjel at jungersen.dk>
Betreff: Re: [Rspamd-Users] Rspamd does not reject virus mails

On 11-04-2025 10:47, Ralf Kania via Users wrote:
> Hello Benny,
>
> I use this script here to copy holded mails to qurantine folder, and 
> afterwards it executes
>   postsuper -d queue-id
> #### script ###
> #!/bin/bash
> QUARANTINEDIR="/var/quarantine"
> # 2022-11-03 #
> DATE="`date +%F`"
> cd $QUARANTINEDIR
> # Anzahl Mails in der Hold Queue #
> COUNT_MAILS="`ls -l /var/spool/postfix/hold/|wc -l`"
> # wenn Folder von heute schon existiert, wechsel rein # if  [ -d 
> "$DATE" ]
>          then
>          cd $DATE
>          cp  /var/spool/postfix/hold/* .
>
> # wenn es den Folder noch nicht gibt, erstell ihn und wechsel rein #
>          else
>          mkdir $DATE
>          cd $DATE
>          cp  /var/spool/postfix/hold/* .
> fi
> /usr/sbin/postsuper -d ALL hold
> ### LOG ###
> echo -e "DATUM: $DATE\nAnzahl Mails:  $COUNT_MAILS\n" >> 
> /scripts/quarantine-to-folder/moved.log
> ############

Don't you risk removing mails from the queue that have not been copied?
> no til now not. I thought when the command will done at 1 am hopefully no mail is sent.
> but you are right it should be aware of it. I will change the script a bit. 

Mails that arrive after the "cp" but before the "postsuper -d"

??
Danjel

>
> Regards
> Ralf
>
> -----Ursprüngliche Nachricht-----
> Von: Users<users-bounces at lists.rspamd.com> Im Auftrag von Benny 
> Pedersen via Users
> Gesendet: Donnerstag, 10. April 2025 17:02 An:users at lists.rspamd.com
> Cc: Benny Pedersen<me at junc.eu>
> Betreff: Re: [Rspamd-Users] Rspamd does not reject virus mails
>
> Ralf Kania via Users skrev den 2025-04-10 16:09:
>> Hello Danjel,
>>
>> when you set the option
>> quarantine_on_reject = true;
>> Than the spam mails will not rejected. They will be moved to the 
>> postfix hold queue.
>> Afterwards you can move it via a script to /var/quarantine as example 
>> to check false positives.
> dont touch internal data in postfix quede
>
> use postcat queue-id and possible postsuper -d queue-id
>
> just heads up there
>
> /var/quarantine is imho not internal data on postfix, only saying be 
> carefull
>
>
>
--
Med venlig hilsen/Kind regards
Danjel Jungersen
Mail: danjel at jungersen.dk
Mobile: +45 20 42 20 11

Jungersen Grafisk ApS,
Holsbjergvej 39, DK-2620 Albertslund,
Denmark.
Tel: +45 43 64 10 00

WEBSHOP: PRINTLIGHT.DK <https://www.printlight.dk> | WWW.JUNGERSEN.DK <https://www.jungersen.dk>

Logo <https://www.jungersen.dk>
--
Users mailing list
Users at lists.rspamd.com
https://lists.rspamd.com/mailman/listinfo/users