DrWEB-DAEMON postmaster messages

[wardjame]

I am running plesk 8.1 on a RHEL server with the Dr. Web anti-virus module installed.

I find myself receiving a rediculous number of messages to the server postmaster address from the DrWEB-DAEMON. They look like this:

Dear Postmaster,

the message with following attributes has not been checked due to the licenses limitation.

Sender = DrWEB-DAEMON@[url]www.xxxxxx.com[/url] (may be forged) 
Recipients = [email]postmaster@xxxxxx.com[/email] 
Subject =  A message has not been checked due to license limitations
Message-ID =  <20070306152028.5999.qmail@[url]www.xxxxxx.com[/url]>

--- Dr.Web report ---
Dr.Web detailed report:
127.0.0.1 [3732] drweb.tmp.D4PR1h - message's envelope 
(addresses) aren't present in license (protected e-mail`s), skipped!

--- Dr.Web report ---

Any idea what is causing these and how I can reduce them. I am recieving several of these messages per-minute!

Thanks in advance.

 

[michaellunsford]

the originating server is 127.0.0.1, aka localhost. It doesn't check emails on it's own server. Granted it did not actually get generated locally, but that's what the email says. Very good indication that it's SPAM anyway.

 

[Satoriya]

Hi,

By the way, possible reason of this notifications is that there is no permanent Dr.Web license key installed on the server.
Plesk comes with default Dr.Web license key that is limited by 15 mailboxes. Therefore, only first 15 mailboxes created in Plesk will be protected by Dr.Web. The list of these mailboxes you can see here:

# less /etc/drweb/users.conf

You can also disable such notification in Dr.Web configuration file /etc/drweb/drweb_qmail.conf.

[LicenseLimitNotifications]
AdminNotify = no
AdminTemplate = /etc/drweb/templates/en/qmail/license-admin.msg