MailScanner not removing virus even though it was found?

[Mike Kercher]

I am pasting what was in the email I replied to:

Here is some of the configurations, if this helps:

Probably what happened is a line got wrapped and I misread it :)

Mike

% grep -v "^#" MailScanner.conf | egrep "Virus|Deliver"
Deliver Unparsable TNEF = no
Virus Scanning = yes
Virus Scanners = mcafee
Virus Scanner Timeout = 300
Deliver Disinfected Files = yes
Silent Viruses = HTML-IFrame Klez Yaha-E Bugbear Braid-A WinEvar Palyh Sobig
Fizzer Still Deliver 
Silent Viruses = yes
Deleted Virus Message Report        = %report-dir%/deleted.virus.message.txt
Stored Virus Message Report        = %report-dir%/stored.virus.message.txt

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Paul Linton
Sent: Wednesday, July 09, 2003 8:51 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: MailScanner not removing virus even though it was found?


Hmmm, I doubled checked and did not find it twice.  In the off change that
this was causing a problem, I did change it to 'none':

% grep -v "^#" MailScanner.conf | grep -i virus
Virus Scanning = yes
Virus Scanners = mcafee
Virus Scanner Timeout = 300
Silent Viruses = none
Still Deliver Silent Viruses = yes
Deleted Virus Message Report        = %report-dir%/deleted.virus.message.txt
Stored Virus Message Report        = %report-dir%/stored.virus.message.txt
Sender Virus Report        = %report-dir%/sender.virus.report.txt
Virus Modify Subject = yes
Virus Subject Text = {Virus?}
Attachment Warning Filename = VirusWarning.txt
Virus Scanner Definitions = %etc-dir%/virus.scanners.conf

Same effect.

Thanks - I'll keep looking.  Doing a 'debug' one-time run didn't show
anything else.  I'm hesitant to start adding debug statements in all the
perl modules.

- Paul

On Wed, Jul 09, 2003 at 08:37:01AM -0500, Mike Kercher wrote:
> The only thing that catches my eye is that you have:
>
> Silent Viruses =
>
> defined twice.  I set my Silent Viruses = none in my config file 
> because I want to know when a virus is found.  I also have
>
> Still Deliver Silent Viruses = yes
>
> Mike
>
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On 
> Behalf Of Paul Linton
> Sent: Wednesday, July 09, 2003 8:05 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: MailScanner not removing virus even though it was found?
>
>
> On Wed, Jul 09, 2003 at 08:38:59AM +0200, Raymond Dijkxhoorn wrote:
> > > seems to be working fine, with the exception of virus removal. 
> > > MailScanner calls McAfee and sees the virus, but then happily 
> > > sends the message on, virus and all, no warning to the recipient, 
> > > etc. Did I miss something in the .conf
> > It might be interesting to see your virus settings.
> >
> > Deliver Disinfected Files = ?
> > Silent Viruses =  ?
> > Still Deliver Silent Viruses = ?
>
> Here is some of the configurations, if this helps:
>
> % grep -v "^#" MailScanner.conf | egrep "Virus|Deliver" Deliver 
> Unparsable TNEF = no Virus Scanning = yes
> Virus Scanners = mcafee
> Virus Scanner Timeout = 300
> Deliver Disinfected Files = yes
> Silent Viruses = HTML-IFrame Klez Yaha-E Bugbear Braid-A WinEvar Palyh
Sobig
> Fizzer Still Deliver Silent Viruses = yes
> Deleted Virus Message Report        =
%report-dir%/deleted.virus.message.txt
> Stored Virus Message Report        = %report-dir%/stored.virus.message.txt
> Sender Virus Report        = %report-dir%/sender.virus.report.txt
> Deliver Cleaned Messages = yes
> Virus Modify Subject = yes
> Virus Subject Text = {Virus?}
> Attachment Warning Filename = VirusWarning.txt
> Virus Scanner Definitions = %etc-dir%/virus.scanners.conf Deliver In
> Background = yes Delivery Method = batch
>
> Thanks for any help/pointers!
>
> - Paul
>
> --
> Paul Linton      Systems Programmer       paul at cs.uky.edu
> UofK Department of Computer Science       (859) 257-3962

--
Paul Linton      Systems Programmer       paul at cs.uky.edu
UofK Department of Computer Science       (859) 257-3962