Qmail keeps resending infected messages

Refers to:

  • Plesk 11.0 for Linux
  • Plesk 12.0 for Linux

Created:

2016-11-16 13:03:15 UTC

Modified:

2016-12-21 19:50:45 UTC

0

Was this article helpful?


Have more questions?

Submit a request

Qmail keeps resending infected messages

Symptoms

Kaspersky is rejecting infected messages and QMail fairly tries to resend it again from bounce queue.

Following notifications are repeated every two minutes:

A message with the following attributes was not delivered because it contains an infected object.

Sender = (may be forged)
Recipients = postmaster@domain.tld
Subject = failure notice
Message-ID = ${MSGID}

--- Antivirus report ---
The following virus was found:
Virus.Win32.Alman.b
Detected threat is highly dangerous
--- Antivirus report ---

Date: 1 Oct 2014 10:38:09 -0300
From: MAILER-DAEMON@ns4004075.ip-168-4-192.net
To: postmaster@domain.tld
Subject: failure notice

Cause

Incorrect behavior of KAV with Qmail only. The mail handler prevented the sending of messages that contained viruses so that such messages remained in the bounce queue.

Plesk internal issue #PPPM-2165 . It was fixed in Plesk 12 microupdate #44 .

Resolution

For Plesk 12 : apply the latest Plesk microupdates .

Workaround

  1. Disable notifications in /opt/kav/sdk8l3/etc/kav-handler.cfg

  2. Switch to Postfix mail server: run Plesk autoinstaller and choose Postfix . Qmail server will be marked for removal and all mail settings/messages will be transferred to Postfix .

Have more questions? Submit a request
Please sign in to leave a comment.