F-PROT problem?

[Julian Field]

Something is going wrong in how MailScanner is calling your copy of F-Prot.
If you do these 2 commands, it should output some sort of summary showing
how many files it scanned, at the very least.
         cd /tmp
         /usr/lib/MailScaner/f-prot-wrapper -old -archive -dumb .
(don't forget the dot on the end)

If you get some sort of "command not found" error, then you have installed
your copy of F-Prot somewhere different than the standard location, and you
will need to alter the f-prot-wrapper script so it calls it in the right
place. That script is very simple, you'll soon work out what you need to
change in it.

Let us know how you get on.

At 23:56 06/11/2002, you wrote:
>I have RedHat 7.1, Sendmail8.9.3, MailScanner 4.04-1 and f-prot 3.12b.
>
>Everything its seems to be working ok, but if I send a message from an
>external account (hotmail) with a virus attached, I have no warning about
>an infected message. I tried the EICAR_test file too, but nothing
>happened, I just get these lines in maillog:
>
>Nov  6 17:34:11 ns0 sendmail[5914]: RAA05914:
>from=<<mailto:user at hotmail.com>user at hotmail.com>, size=96715, class=0,
>pri=126715, nrcpts=1,
>msgid=<<mailto:OE17Bt3J3JCj2fBUA510000094e at hotmail.com>OE17Bt3J3JCj2fBUA510000094e at hotmail.com>,
>proto=ESMTP, relay=oe17.law7.hotmail.com [216.33.236.121]
>Nov  6 17:34:11 ns0 MailScanner[5190]: New Batch: Found 2 messages waiting
>Nov  6 17:34:11 ns0 MailScanner[5190]: New Batch: Scanning 1 messages,
>97125 bytes
>Nov  6 17:34:12 ns0 MailScanner[5190]: Virus and Content Scanning: Starting
>Nov  6 17:34:12 ns0 MailScanner[5190]: Uninfected: Delivered 1 messages
>Nov  6 17:34:12 ns0 sendmail[5919]: RAA05914:
>to=<<mailto:mail_user at minar.com>mail_user at minar.com>, delay=00:00:09,
>xdelay=00:00:00, mailer=local, stat=Sent
>I tested f-prot manually and it says the infection is there (EICAR_test
>and an infected file (Magistr). I really apreciate your help to solve this
>issue.
>
>
>BTW, I got warned about some infected messages, but they are the ones with
>IFrame tags in it.
>
>
>Thanks in advance
>
>
>(Sorry about my poor English)
>
>
>vgm

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20021107/e3ac850f/attachment.html