mailscanner not scanning

[Julian Field]

You have got your init.d script wrong by the looks of it.
You should have 1 copy of sendmail running just queueing into
/var/spool/mqueue.in (-bd but no -q, and the couple of options required to
set "queueonly" and "/var/spool/mqueue.in".
And you should have 1 copy of sendmail running just delivery from
/var/spool/mqueue (so a -q15m but no -bd).

If the MailScanner process itself is not running, you should just see mail
accumulate in /var/spool/mqueue.in. It should *not* be delivered, just
gradually collect there. Once you start up the MailScanner process (using
check_mailscanner) that will disinfect the messages and move them into
/var/spool/mqueue, at which point the 2nd sendmail process will deliver them.

At 07:18 06/09/2002, you wrote:
>Hi there,
>             i have a question regarding the incoming queue dir and outgoing
>queue dir.
>this is my mail server setup
>if email send from client's machine, email will goto /var/spool/mqueue.in
>then if email address belongs to local domain, email will be sent locally to
>/var/spool/mail
>if not email will be sent to my ISP smtp server to be forwarded to the
>appropriate server.
>so my mailscanner.conf files contains - incoming queue dir
>/var/spool/mqueue.in
>                                                         - outgoing queue dir
>/var/spool/mqueue
>previously my sendmail was sending mails through /var/spool/mqueue before i
>changed it to /var/spool/mqueue.in to accomdate mailscanner
>
>but once i try sending an email with attachment eicar.txt or eicar.com
>(virus file), the file passes through without clearing the virus. what is
>the most likely problem? what are the things to check? i am using sophos
>anti-virus at the moment.
>i even tried using sophos with all the available options to scan the user's
>mailbox but it can't clean the attachment (/var/spool/mail/username)
>
>Regards,
>Daniel Tan
>67469188 Ext.665
>DID: 68430665
>MIS Department
>Shop N Save Pte Ltd
>: danieltan at shopnsave.com.sg
>
>[This e-mail is confidential and may also be privileged. If you are not the
>intended recipient, please delete it and notify us immediately; you should
>not copy or use it for any purpose, nor disclose its contents to any other
>person. Thank you.]

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ