Problems with two different MIME attachment types

[Craig Pratt]

Hi all,

Thanks for the great software and community support!

I recently upgraded to MS 4.12-2 (via RH RPM), and updated the
dependent Perl mods. After installation, I tested the new version
against the e-mail virus scanning script in Nessus.

Out of the 5 test messages, 3 were tagged by MS as viruses (by the
filename rules), and 2 got through to my mail client - even when both
the filename rules and RAV antivirus should have tagged the "eicar.com"
test attachment.

Could I get a couple volunteers to verify? You'll just receive 5 test
e-mails generated by the NASL script, each with a 68-byte EICAR test
file ("eicar.com") attached in different forms.

I'll post details in a follow-up, if the problem repros.

If you're interested in the hacked NASL script - which allows you to
run this test stand-alone using the nasl command line - let me know and
I'll forward it along.

Thanks,

Craig Pratt
craig at strong-box.net


--
This message checked for dangerous content by MailScanner on StrongBox.