Viruses found by clamav not logged in mysql
Nicholas Esborn
nicholas_esborn at AFFYMETRIX.COM
Mon Aug 25 19:37:12 IST 2003
Hello,
I'm using SQL_Logging so that I can analyze MailScanner's (excellent)
performance using MailWatch for MailScanner. The only problem I haven't
been able to nail down is that viruses caught by ClamAV don't show up in
the SQL database, unless they're also caught by blocked attachment checks.
I do see plenty of FOUND entries in /var/log/maillog:
Aug 25 11:33:09 mailscanner1 MailScanner[23742]: /var/spool/filter/MailScanner/incoming/23742/./h7PIX2Lr028843/application.pif: Worm.Sobig.F FOUND
Aug 25 11:34:05 mailscanner1 MailScanner[23774]: /var/spool/filter/MailScanner/incoming/23774/./h7PIY1Lr028976/document_all.pif: Worm.Sobig.F FOUND
Aug 25 11:34:37 mailscanner1 MailScanner[23742]: /var/spool/filter/MailScanner/incoming/23742/./h7PIYXLr029070/details.pif: Worm.Sobig.F FOUND
It certainly looks like MailScanner is aware of the catches, and the files
are properly quarantined, just not logged in SQL.
Other than this one missing value, the SQL logging is complete. Any
suggestions?
Thanks,
-nick
--
Nicholas Esborn
Affymetrix, Inc.
510/428.8505
Every message PGP signed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030825/139d73fb/attachment.bin
More information about the MailScanner
mailing list