Viruses found by clamav not logged in mysql

Nicholas Esborn nicholas_esborn at AFFYMETRIX.COM
Mon Aug 25 19:37:12 IST 2003


Hello,

I'm using SQL_Logging so that I can analyze MailScanner's (excellent)
performance using MailWatch for MailScanner.  The only problem I haven't
been able to nail down is that viruses caught by ClamAV don't show up in
the SQL database, unless they're also caught by blocked attachment checks.

I do see plenty of FOUND entries in /var/log/maillog:

Aug 25 11:33:09 mailscanner1 MailScanner[23742]: /var/spool/filter/MailScanner/incoming/23742/./h7PIX2Lr028843/application.pif: Worm.Sobig.F FOUND  
Aug 25 11:34:05 mailscanner1 MailScanner[23774]: /var/spool/filter/MailScanner/incoming/23774/./h7PIY1Lr028976/document_all.pif: Worm.Sobig.F FOUND  
Aug 25 11:34:37 mailscanner1 MailScanner[23742]: /var/spool/filter/MailScanner/incoming/23742/./h7PIYXLr029070/details.pif: Worm.Sobig.F FOUND  

It certainly looks like MailScanner is aware of the catches, and the files
are properly quarantined, just not logged in SQL.

Other than this one missing value, the SQL logging is complete.  Any
suggestions?

Thanks,

-nick

-- 
Nicholas Esborn
Affymetrix, Inc.

510/428.8505

Every message PGP signed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030825/139d73fb/attachment.bin


More information about the MailScanner mailing list