Mailscanner 4.05-3 and virus infection (end)
Nicolas Viers - SCI Limoges
viers at UNILIM.FR
Mon Nov 18 10:55:13 GMT 2002
Hello,
I post this mail to give the response to my pb
It was:
----------------------------------------------------------
i had pb with my mailscanner config (4.05-3)
When i test with virus file, the mail log file said:
Nov 15 14:26:33 limdns-new MailScanner[13585]:
/usr/local/MailScanner-4.05-3/var/incoming/13585/gAFDQQAl014953/test.zip/URFRIEND.SCR
Found virus or variant W32/Yaha !!!
Nov 15 14:26:33 limdns-new MailScanner[13585]:
/usr/local/MailScanner-4.05-3/var/incoming/13585/gAFDQQAl014953/test.zip/VALUE.EXE
Found virus or variant W32/Klez !!!
Nov 15 14:26:33 limdns-new MailScanner[13585]: Virus Scanning: mcafee found
8 infections
Nov 15 14:26:33 limdns-new MailScanner[13585]: Virus Scanning: Found 8 viruses
Nov 15 14:26:33 limdns-new MailScanner[13585]: Uninfected: Delivered 1
messages
Nov 15 14:26:33 limdns-new MailScanner[15008]: MailScanner
Nov 15 14:26:33 limdns-new MailScanner[15008]: MailScanner E-Mail Virus
Scanner version 4.05-3 starting...
Nov 15 14:26:33 limdns-new MailScanner[15008]: Using locktype = flock
8 virus are found, but the attach file was delivered with the message
"no infection was found"
Mcafee said viruses found and mailscanner Unifected: deliver 1 message
Why mailscanner does not put infected file in quarantine directory ?
I had another mailscanner 2.60 version and it works fine with this zip
infected file
Maybe it was due to a bad version of my perl modules
And i don't had install first the rpm version.
when i do this (rpm version) mailscanner works fine.
I want to give a precision:
in the mailscanner.conf file there is a directive "Deliver Cleaned Messages"
When i put No to this no message were sent to the sender of the virus. With
"yes"
it's ok
For me this directive apply to virus cleaned by mailscanner and not detected.
____________________________________________________________
Nicolas Viers | Service Commun Informatique
Mél: viers at unilim.fr | 123, avenue Albert Thomas
| 87060 Limoges cedex
Tel: 05-55-45-77-09 | Fax: 05-55-45-75-95
http://www.unilim.fr/sci
____________________________________________________________
More information about the MailScanner
mailing list