F-PROT problem?
Vicente Guerrero M.
vguerrero at minar.com
Wed Nov 6 23:56:53 GMT 2002
I have RedHat 7.1, Sendmail8.9.3, MailScanner 4.04-1 and f-prot 3.12b.
Everything its seems to be working ok, but if I send a message from an external account (hotmail) with a virus attached, I have no warning about an infected message. I tried the EICAR_test file too, but nothing happened, I just get these lines in maillog:
Nov 6 17:34:11 ns0 sendmail[5914]: RAA05914: from=<user at hotmail.com>, size=96715, class=0, pri=126715, nrcpts=1, msgid=<OE17Bt3J3JCj2fBUA510000094e at hotmail.com>, proto=ESMTP, relay=oe17.law7.hotmail.com [216.33.236.121]
Nov 6 17:34:11 ns0 MailScanner[5190]: New Batch: Found 2 messages waiting
Nov 6 17:34:11 ns0 MailScanner[5190]: New Batch: Scanning 1 messages, 97125 bytes
Nov 6 17:34:12 ns0 MailScanner[5190]: Virus and Content Scanning: Starting
Nov 6 17:34:12 ns0 MailScanner[5190]: Uninfected: Delivered 1 messages
Nov 6 17:34:12 ns0 sendmail[5919]: RAA05914: to=<mail_user at minar.com>, delay=00:00:09, xdelay=00:00:00, mailer=local, stat=Sent
I tested f-prot manually and it says the infection is there (EICAR_test and an infected file (Magistr). I really apreciate your help to solve this issue.
BTW, I got warned about some infected messages, but they are the ones with IFrame tags in it.
Thanks in advance
(Sorry about my poor English)
vgm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20021106/5a0c4184/attachment.html
More information about the MailScanner
mailing list