Log issue

[Julian Field]

At 11:56 08/11/2002, you wrote:
>Question is:
>Is the rescan really neccessary? (Probably is a good idea)

Yes. Vital.

>If so, can I modify the rescan log entries somehow?
>If not, how do I turn it off?

I have changed the logging so that you will get
         Virus Scanning: f-secure found 2 infections
but then
         Virus Re-scanning: f-secure found 2 infections
so you don't get identical log entries for different things.

I hope that doesn't break too many people's scripts!

>First scan:
>...
>MailScanner[1281]: New Batch: Scanning 1 messages, 2491 bytes
>MailScanner[1281]: Spam Checks: Starting
>MailScanner[1281]: [./gA8BPSU01371/eicar.zip] eicar.com^Iinfection:
>EICAR_Test_File
>MailScanner[1281]: [./gA8BPSU01371/eicar-1.zip] eicar.com^Iinfection:
>EICAR_Test_File
>MailScanner[1281]: Virus Scanning: f-secure found 2 infections
>MailScanner[1281]: Virus Scanning: Found 2 viruses
>MailScanner[1281]: Saved infected "eicar-1.zip" to
>/.../20021108/gA8BPSU01371
>MailScanner[1281]: Saved infected "eicar.zip" to
>/.../quarantine/20021108/gA8BPSU01371
>MailScanner[1281]: Cleaned: Delivered 1 cleaned messages
>....
>Then Rescan:
>....
>MailScanner[1281]: Notices: Warned about 1 messages
>MailScanner[1281]: Disinfection: Attempting to disinfect 1 messages
>MailScanner[1281]: [./gA8BPSU01371/eicar.zip] eicar.com^Iinfection:
>EICAR_Test_File
>MailScanner[1281]: [./gA8BPSU01371/eicar-1.zip] eicar.com^Iinfection:
>EICAR_Test_File
>MailScanner[1281]: Virus Scanning: f-secure found 2 infections
>MailScanner[1281]: Disinfection: Rescan found only 2 viruses
>....
>
>BTW. Julian Field ROCKS!

:-)
--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ