logs not showing >>>Virus
Declan Grady
Declan.Grady at NUVOTEM.COM
Fri Jul 5 09:14:27 IST 2002
Yes, I get the usual messages from mailscanner in the /var/log/maillog file
(Snippet from 'tail -100 /var/log/maillog | grep mailscanner' shwon below)
My syslog.conf contains the line 'mail.* /var/log/maillog' which I think should cover all mail logging ?
Mabye the '>>>Virus' has become 'Possible virus' .. ?
Cheers,
Declan
<snip>
Jul 5 08:47:28 mail mailscanner[17020]: Scanning 1 messages, 8020 bytes
Jul 5 08:47:28 mail mailscanner[17020]: Scanned 1 messages, 8020 bytes in 0 seconds
Jul 5 08:47:58 mail mailscanner[17020]: Scanning 4 messages, 259676 bytes
Jul 5 08:47:59 mail mailscanner[17020]: Possible virus hidden in a screensaver in Edition.scr
Jul 5 08:47:59 mail mailscanner[17020]: Found 2 viruses in messages g657jOCG017225
Jul 5 08:47:59 mail mailscanner[17020]: Scanned 4 messages, 259676 bytes in 1 seconds
Jul 5 08:47:59 mail mailscanner[17020]: Deleted infected messages g657iOCG017225
Jul 5 08:47:59 mail mailscanner[17020]: Notified postmaster about 1 infections
Jul 5 08:47:59 mail mailscanner[17020]: Scanning 1 messages, 1872 bytes
Jul 5 08:47:59 mail mailscanner[17020]: Scanned 1 messages, 1872 bytes in 0 seconds
<snip>
On Thu, Jul 04, 2002 at 05:29:34PM +0100, Julian Field mentioned:
> Are you getting any messages from MailScanner in your logs at all? If not,
> then check your /etc/syslog.conf to see where mail.info is being logged.
>
> Add mail.info to your maillog line in /etc/syslog.conf and "kill -HUP" your
> syslogd.
>
> At 16:42 04/07/2002, you wrote:
> >Excuse my stupidity / newbieness ...
> >
> > >From memory, and from some recent posts on this list, it seems the
> > syslogs should be showing somwthing like >>>Virus xxx blah blah when
> > mailscanner finds a virus.
> >
> >I dont see anything like this in either messages or in maillog files.
> >
> >I think I saw this with a (much) earlier version of mailscanner.
> >
> >Is it my config ? If so, what option(s) ?
> >
> >Cheers,
> >Declan
>
> --
> Julian Field Teaching Systems Manager
> jkf at ecs.soton.ac.uk Dept. of Electronics & Computer Science
> Tel. 023 8059 2817 University of Southampton
> Southampton SO17 1BJ
More information about the MailScanner
mailing list