Reject virus email instead of trash silently

No, Gmail block virus email at SMTP.
You wont be able to send a virus or eicar test virus using Gmail :blush:

Mail managed by Virtualmin without rejecting at the SMTP level will allow you to send the email but then email is trashed without you know so email wont be delivered.

What I would like to see is a block of virus email immediately at SMTP checks so if ougoing email has a virus is rejected with an error. You wont be able to send the email so you know the email are not delivered.

For who send a virus to a Virtualmin protected email address will also receive a Delivery Status Notification as email is Rejected. The error message showed to the sender in this case can also be customized.

Currently in Virtualmin virus email are accepted then trashed so no error will be show to who send an infected email or who try to deliver an infected email.

Check the mail logs, do you see gmail reject? I think not.
I tested and do not see it happening.
Gmail processes the email then bounces a reject.

Please read our guidelines about AI-generated content and edit your posts:

https://forum.virtualmin.com/guidelines

There are still mail receipts.

Don’t most programs scrub viruses and then deliver what’s left anyhow? Safest thing to do with a known virus laden email is to send it to /dev/null. If you need a special case, then you are on your own. What Google does is of little relevance here. Nothing like having to fill out some long form and solve their captchas to report the ‘xhit’ they allow on their services.

How should edit my reply?
I tried to explain why I’m looking to reject virus email instead of trash silently.
I will try to edit the text to be more simple.

Strangely had the poster typed postfix configure to reject virus at smtp time into Google it would have given an exhaustive setup answer. :wink:

Just saying… :winking_face_with_tongue:

I have started the discussion just because I try to have virus email refused rejected but was not able so just reported my issue here.

I know if you search online you find guides but not all guides are good and related to a Virtualmin server.

At the moment without risky customization seems just is not possible to reject virus email.
The main issue is that “you” may send an email and think is delivered when is not. This is a rare case, the email should be infected or have an eicar string that generate an antivirus cleaning…

But would be nice to be informed when an email is not delivered because trashed by the system. Also if someone send something would be nice inform them and seems also a better efficient and safer way to manage virus email.

At the moment seems there is no a safe tested way to do this :smiling_face: because no one has made this setup on Virtualmin.

I may try in the future or for do not corrupt the server stay as I am, as it be.

Alright, thanks! Let us know what you find.

The simple answer is that the server after receiving the email, analyses it before sending the relevant response. This as mention would need to happen within POSTFIX, not procmail.

I know that this definitely happens with spam emails. Not often though.

Outbound scanning would be nice, I am not sure if virtualmin does this, but I could be wrong it has been a while.

I know gmail and outlook analyse outgoing emails and if they are flagged, ever leave the server, shame they are not better at it :smiley:

It doesn’t. OP is going off-roading and I told them how to not shoot themselves in the foot while doing so.

I tried but nothing work.
I tried to configure clamav-milter, all configuration was active but did not work so I resumed back everything.

Please don’t post AI-generated stuff here.

https://forum.virtualmin.com/guidelines

that was not completely ai… @Joe i told you before, that i use it to find better words… :frowning:

What did the logs say?

I cannot help with the logs because I lose it.. I worked to resume back the mail system.
I can just say it doesn’t work. If you use the AI to resolve this AI are not able to help this time.

I’m just unable to reject virus email.
I will keep the trash process.

Issue was: Non-communicating sockets
Both spamass-milter and clamav-milter created their sockets correctly:

/var/spool/postfix/spamass/spamass.sock
/var/run/clamav/clamav-milter.ctl

However, Postfix couldn’t connect to them.

Maybe a conflict with Virtualmin’s default mail flow.

So it’s simple not possible for me try to have email rejected for now.

Please visit your DM to not hurt any guidelines and report back which solution worked out for you!

Sorry, it felt very AI. We’re trying to avoid participating in the Internet “slop” effect. I’d rather see your words, even if imperfect. (We do allow direct translation via AI assistance, if English is not your native language. But, your comment was obviously written by AI even if it was your ideas. Very verbose, flowery, language. I find AI-speak very ugly.)

Also, if someone wants a machines opinion, they can ask any of the several available AIs being pushed on users everywhere.

2 Likes

I was try to refuse virus email instead of delete silently.
Also I find useful also for spam but need two different Milter for that:
spamass-milter and clamav-milter but both was not working.

I know Virtualmin allow to delete virus email and even spam email above custom score, this is good but can be better.

For example… In those days I discover a lot of spam arrive in my inbox… so I reduced the score from 5.0 to 3.0 and this worked… a lot of spam now goes on the spam folder.

In Plesk I was set some rules to refuse certain spam email so I thought about refuse spam email above 3.0 score on Virtualmin but I was not able to do. Why refuse, reject instead of silently delete? To avoid false positive disaster.

An email silently deleted cause no one know about that email was not delivered.
An email rejected inform the sender of the issue and, for example, in my case, can contact support by live chat or web ticket to inform about the email delivery issue.

I’m sad to see no one talked about, requested to reject email instead of silently delete it.
I think would be a great feature be able to setup this in Virtualmin who do already a great job.

I think be able to choose to reject email instead of just silently delete would be very great.
I tried to setup this on my server also if is risky in a production server (I cannot pay also for a test server) but I was not able to do.

I asked help to the AI (sorry for that I know is a world who maybe sometimes ask to AI too much often and we need return to good humanity) but I’m not a developer, a programmer and I have not developers who can fix or resolve, in this case the virus and spam email delivery issue.

Again… Virtualmin is amazing a do a very amazing job by providing protection for virus and spam.. it also use a modern update SpamAssasin that is amazing.

The main issue for me is not able to choose to reject email instead of silently delete.
Silently delete is maybe a way who can look good because who send virus email should be not interested on know email are not delivered or the same for spam but what about false positive?

Or what about someone internal to the server who send an email thinking to have sent and to see it delivered when is not?

For spam the rejection is also more important maybe because if can be set can allow you to block spam reducing false positive. As I told if you reject a spam email with a message.. this let someone that is not spammer know there is a problem and can contact support.

Delete silently let think the email has been delivered and this is not so good on my opinion.

However for now I think I will stop trying to resolve this. I tried my best without success.
About this issue I learn that AI cannot resolve this particular issue and configuration issue. It arrive at point that AI get in loop still repeat the same steps.. and this is bad.

It ask me to check path of socket and all looks good, permission and all looks good.
It ask me to doing email test and nothing work. Email are delivered but never pass between Milters so are not filtered.

I don’t want stress the great Virtualmin staff but I hope maybe this discussion can to make someone curious about the topic and create an appetite, interest in the email rejection function.

Refuse email can also improve server security and performance.

Are we on about the same thing?

Obviously not.

SpamAssassin is not ClamAV. SpamAssassin checks for spam. ClamAV checks for viruses.

1 Like