Mailscanner 4.05-3 and virus infection (end)

Julian Field mailscanner at ecs.soton.ac.uk
Mon Nov 18 11:07:42 GMT 2002


I suspect that your path to the incoming directory that you have in your 
mailscanner.conf file has some links in it. You must put the *real* path to 
the incoming directory in your mailscanner.conf file, like this:
Incoming Work Dir = /usr/local/MailScanner-4.05-3/var/incoming

At 10:55 18/11/2002, you wrote:
>                         Hello,
>I post this mail to give the response to my pb
>It was:
>----------------------------------------------------------
>i had pb with my mailscanner config (4.05-3)
>When i test with virus file, the mail log file said:
>Nov 15 14:26:33 limdns-new MailScanner[13585]: 
>/usr/local/MailScanner-4.05-3/var/incoming/13585/gAFDQQAl014953/test.zip/URFRIEND.SCR 
>Found virus or variant W32/Yaha !!!
>
>Nov 15 14:26:33 limdns-new MailScanner[13585]: 
>/usr/local/MailScanner-4.05-3/var/incoming/13585/gAFDQQAl014953/test.zip/VALUE.EXE 
>Found virus or variant W32/Klez !!!
>
>Nov 15 14:26:33 limdns-new MailScanner[13585]: Virus Scanning: mcafee 
>found 8 infections
>Nov 15 14:26:33 limdns-new MailScanner[13585]: Virus Scanning: Found 8 viruses
>Nov 15 14:26:33 limdns-new MailScanner[13585]: Uninfected: Delivered 1 
>messages
>Nov 15 14:26:33 limdns-new MailScanner[15008]: MailScanner
>Nov 15 14:26:33 limdns-new MailScanner[15008]: MailScanner E-Mail Virus 
>Scanner version 4.05-3 starting...
>
>Nov 15 14:26:33 limdns-new MailScanner[15008]: Using locktype = flock
>
>8 virus are found, but the attach file was delivered with the message
>"no infection was found"
>Mcafee said viruses found and mailscanner Unifected: deliver 1 message
>
>Why mailscanner does not put infected file in quarantine directory ?
>
>I had another mailscanner 2.60 version and it works fine with this zip 
>infected file
>
>
>
>Maybe it was due to a bad version of my perl modules
>And i don't had install first the rpm version.
>
>when i do this (rpm version) mailscanner works fine.
>
>I want to give a precision:
>in the mailscanner.conf file there is a directive "Deliver Cleaned Messages"
>When i put No to this no message were sent to the sender of the virus. 
>With "yes"
>it's ok
>For me this directive apply to virus cleaned by mailscanner and not detected.
>
>
>____________________________________________________________
>
>Nicolas Viers               |  Service Commun Informatique
>Mél: viers at unilim.fr        |  123, avenue Albert Thomas
>                             |     87060 Limoges cedex
>Tel: 05-55-45-77-09         |  Fax: 05-55-45-75-95
>                   http://www.unilim.fr/sci
>____________________________________________________________
>

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ




More information about the MailScanner mailing list