F-PROT problem?

Vicente Guerrero M. vguerrero at minar.com
Wed Nov 6 23:56:53 GMT 2002


I have RedHat 7.1, Sendmail8.9.3, MailScanner 4.04-1 and f-prot 3.12b.

Everything its seems to be working ok, but if I send a message from an external account (hotmail) with a virus attached, I have no warning about an infected message. I tried the EICAR_test file too, but nothing happened, I just get these lines in maillog:

Nov  6 17:34:11 ns0 sendmail[5914]: RAA05914: from=<user at hotmail.com>, size=96715, class=0, pri=126715, nrcpts=1, msgid=<OE17Bt3J3JCj2fBUA510000094e at hotmail.com>, proto=ESMTP, relay=oe17.law7.hotmail.com [216.33.236.121]
Nov  6 17:34:11 ns0 MailScanner[5190]: New Batch: Found 2 messages waiting 
Nov  6 17:34:11 ns0 MailScanner[5190]: New Batch: Scanning 1 messages, 97125 bytes 
Nov  6 17:34:12 ns0 MailScanner[5190]: Virus and Content Scanning: Starting 
Nov  6 17:34:12 ns0 MailScanner[5190]: Uninfected: Delivered 1 messages 
Nov  6 17:34:12 ns0 sendmail[5919]: RAA05914: to=<mail_user at minar.com>, delay=00:00:09, xdelay=00:00:00, mailer=local, stat=Sent

I tested f-prot manually and it says the infection is there (EICAR_test and an infected file (Magistr). I really apreciate your help to solve this issue.


BTW, I got warned about some infected messages, but they are the ones with IFrame tags in it. 


Thanks in advance


(Sorry about my poor English)


vgm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20021106/5a0c4184/attachment.html


More information about the MailScanner mailing list