SV: Strange Error

[Anders Andersson, IT]

> -----Ursprungligt meddelande-----
> Från: Mike Kercher [mailto:mike at CAMAROSS.NET] 
> I *do* have this in my MailScanner.conf:
> 
> # Do you want to allow partial messages, which only contain a 
> fraction of # the attachments, not the whole thing? There is 
> absolutely no way to # scan these "partial messages" properly 
> for viruses, as MailScanner never # sees all of the 
> attachment at the same time. Enabling this option can # allow 
> viruses through. You have been warned. # This can also be the 
> filename of a ruleset so you can, for example, allow # them 
> in outgoing mail but not in incoming mail. Allow Partial Messages = no
> 
> Is that what you are talking about?
> 
Yes, I have to admit I never used sophos but thats the first thing I could
think of. Julian can probably tell more in what order the rules are
executed. If viruscan is done before that check then that might be the
reson...?

> Mike
> 
> 
> > -----Ursprungligt meddelande-----
> > Från: Mike Kercher [mailto:mike at CAMAROSS.NET]
> > 
> > I just upgraded to 4.22-5 and got the message below...obviously 
> > MiMail, but why is Sophos having a problem with it?
> > 
> > 
> > The following e-mail messages were found to have viruses in them:
> > 
> >     Sender: admin-bounces at mymph.com
> > IP Address: 127.0.0.1
> >  Recipient: admin-owner at mymph.com
> >    Subject: Admin post from mailer-daemon at genesis.camaross.net 
> > requires approval
> >  MessageID: h77HCnw07575
> >     Report: Sophos: Could not check message.zip/message.html
> > (part of multi volume archive)
> 
> Sounds like somone is using outlook express and deviding file 
> to small separet messages..... sorry cant remeber correct 
> english term  :(