Mailscanner 4.05-3 and virus infection (end)
Julian Field
mailscanner at ecs.soton.ac.uk
Mon Nov 18 11:07:42 GMT 2002
I suspect that your path to the incoming directory that you have in your
mailscanner.conf file has some links in it. You must put the *real* path to
the incoming directory in your mailscanner.conf file, like this:
Incoming Work Dir = /usr/local/MailScanner-4.05-3/var/incoming
At 10:55 18/11/2002, you wrote:
> Hello,
>I post this mail to give the response to my pb
>It was:
>----------------------------------------------------------
>i had pb with my mailscanner config (4.05-3)
>When i test with virus file, the mail log file said:
>Nov 15 14:26:33 limdns-new MailScanner[13585]:
>/usr/local/MailScanner-4.05-3/var/incoming/13585/gAFDQQAl014953/test.zip/URFRIEND.SCR
>Found virus or variant W32/Yaha !!!
>
>Nov 15 14:26:33 limdns-new MailScanner[13585]:
>/usr/local/MailScanner-4.05-3/var/incoming/13585/gAFDQQAl014953/test.zip/VALUE.EXE
>Found virus or variant W32/Klez !!!
>
>Nov 15 14:26:33 limdns-new MailScanner[13585]: Virus Scanning: mcafee
>found 8 infections
>Nov 15 14:26:33 limdns-new MailScanner[13585]: Virus Scanning: Found 8 viruses
>Nov 15 14:26:33 limdns-new MailScanner[13585]: Uninfected: Delivered 1
>messages
>Nov 15 14:26:33 limdns-new MailScanner[15008]: MailScanner
>Nov 15 14:26:33 limdns-new MailScanner[15008]: MailScanner E-Mail Virus
>Scanner version 4.05-3 starting...
>
>Nov 15 14:26:33 limdns-new MailScanner[15008]: Using locktype = flock
>
>8 virus are found, but the attach file was delivered with the message
>"no infection was found"
>Mcafee said viruses found and mailscanner Unifected: deliver 1 message
>
>Why mailscanner does not put infected file in quarantine directory ?
>
>I had another mailscanner 2.60 version and it works fine with this zip
>infected file
>
>
>
>Maybe it was due to a bad version of my perl modules
>And i don't had install first the rpm version.
>
>when i do this (rpm version) mailscanner works fine.
>
>I want to give a precision:
>in the mailscanner.conf file there is a directive "Deliver Cleaned Messages"
>When i put No to this no message were sent to the sender of the virus.
>With "yes"
>it's ok
>For me this directive apply to virus cleaned by mailscanner and not detected.
>
>
>____________________________________________________________
>
>Nicolas Viers | Service Commun Informatique
>Mél: viers at unilim.fr | 123, avenue Albert Thomas
> | 87060 Limoges cedex
>Tel: 05-55-45-77-09 | Fax: 05-55-45-75-95
> http://www.unilim.fr/sci
>____________________________________________________________
>
--
Julian Field Teaching Systems Manager
jkf at ecs.soton.ac.uk Dept. of Electronics & Computer Science
Tel. 023 8059 2817 University of Southampton
Southampton SO17 1BJ
More information about the MailScanner
mailing list