mailscanner is not processing virus mails of the same kind the same way

[Antony Stone]

On Wednesday 20 August 2003 11:28 pm, Kim Schulz wrote:

> Hi
>
> here's a bit from the messages log:

Message PAA31834 identified as containing Sobig.F in application.pif
Message QAA03813 contains a .txt attachment, which probably contains a bounce
message, itself containing a .pif attachment which is infected with Sobig.F
Message QAA03969 identified as containing Sobig.F in application.pif
Message QAA04585 identified as containing Sobig.F in application.pif

> Has anyone else experienced that mails with viruses like this can get
> right through the filter and get the status Clean?

Which of these messages from your log got the status "clean".   As far as I
can tell, they were all identified as containing Sobig.F

Three were original messages and one was a non-delivery bounce.

Antony.

--

Never write it in Perl if you can do it in Awk.
Never do it in Awk if sed can handle it.
Never use sed when tr can do the job.
Never invoke tr when cat is sufficient.
Avoid using cat whenever possible.