F-Secure

[Emanuele Salvador]

On Martedì, ott 22, 2002, at 16:04 Europe/Rome, Emanuele Salvador wrote:

> On Martedì, ott 22, 2002, at 15:44 Europe/Rome, Julian Field wrote:
>
>> At 14:20 22/10/2002, you wrote:
>>> I recently decided to switch from my amavis-based mail system to
>>> mailscanner, most of all for the anti-spam features.
>>> Anyway I'm not able to use f-secure antivirus software; I downloaded 
>>> 30
>>> minutes ago the latest release, but it still doesn't work - BTW, I
>>> tried to change the Minimum Code Status to alpha, beta and 
>>> unsupported,
>>> but with no results...any suggestions?
>>
>> What errors are you getting? Does the f-secure-wrapper work? What 
>> version
>> of MailScanner are you using? Tar or RPM distribution?
>> --
>
>
> The f-secure-wrapper works (reports F-secure  R.4.15 build 4370):
> MailScanner I use is 4.01.-6, RPM distribution;
>
> When I send an eicar test, I get on stdout a FATAL: Encountered code 
> that does not meet acceptable stability at 
> /usr/lib/MailScanner/mailScanner/SweepViruses.pm line 1241; this at 
> the end of a series of "Scanner "x" (x stands for panda, f-prot, 
> kaspersky etc, which BTW are not enabled in MailScanner.conf) scanning 
> code status 4 at /usr/lib/MailScanner/mailScanner/SweepViruses.pm line 
> 1239.
>
> Thanks,
> Emanuele
>
>
Oct 22 11:10:22 mailbox MailScanner[15059]: Spam Checks: Found 1 spam 
messages
Oct 22 11:10:22 mailbox MailScanner[15059]: Spam Actions: message 
g9M77nI20895 actions are deliver
Oct 22 11:10:22 mailbox MailScanner[15059]: Virus Scanning: Starting
Oct 22 11:10:23 mailbox MailScanner[15059]: 
/g9M780I20910/eicar.tar/eicar.com
      Found: EICAR test file NOT a virus.
Oct 22 11:10:23 mailbox MailScanner[15059]: Virus Scanning: mcafee 
found 1 infections
Oct 22 11:10:23 mailbox MailScanner[15059]: Looks like a problem... 
dumping status information
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "antivir": scanning 
code status 1 - disinfect code status 1
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "f-secure": 
scanning code status 3 - disinfect code status 3
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "none": scanning 
code status 0 - disinfect code status 0
  0 - disinfect code status 0
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "nod32": scanning 
code status 4 - disinfect code status 4
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "inoculate": 
scanning code status 4 - disinfect code status 4
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "clamav": scanning 
code status 2 - disinfect code status 0
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "inoculan": 
scanning code status 4 - disinfect code status 4
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "mcafee": scanning 
code status 4 - disinfect code status 4
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "panda": scanning 
code status 1 - disinfect code status 1
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "kaspersky": 
scanning code status 3 - disinfect code status 2
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "rav": scanning 
code status
4 - disinfect code status 4
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "sophos": scanning 
code status 4 - disinfect code status 4
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "command": scanning 
code status 4 - disinfect code status 4
Oct 22 11:10:23 mailbox MailScanner[15059]: Scanner "f-prot": scanning 
code status 4 - disinfect code status 4
Oct 22 11:10:23 mailbox MailScanner[15059]: FATAL: Encountered code 
that does not meet configured acceptable stability
Oct 22 11:10:23 mailbox MailScanner[15059]: FATAL: *Please go and READ* 
http://www.sng.ecs.soton.ac.uk/mailscanner/install/codestatus.shtml as 
it will tell you
what to do.

This is the full maillog extract - it seems that MailScanners tries to 
fire up all the antiviruses.

Regards,
Emanuele