Sophos and 'corrupt' files (slight return)

Julian Field mailscanner at ecs.soton.ac.uk
Fri Mar 7 10:09:14 GMT 2003


Can I snigger at the front then?

Sophos 3.67 will help this.

However, to avoid trouble from what Sophos thinks are corrupt files, you
can enable the option
Allowed Sophos Error Messages = corrupt
in MailScanner.conf. This option is commented out by default. Bear in mind
that this will bypass scanning of files that Sophos thinks are corrupt.

At 09:51 07/03/2003, you wrote:
>Hello all...
>
>In a terrible problem as a result of an upgrade to amavis (no sniggers at
>the back please),
>I had to push my 'test' MailScanner box into service yesterday for our site.
>
>I'm running:
>mailscanner-4.13-3
>Sophos sweep 3.66
>Mcafee 4.12.0
>F-prot SB 3.12d
>SA 2.50 (with Julian's patch, Razor2 and DCC)
>Sendmail as the MTA
>... on RedHat 7.3
>
>I'm still seeing:
>
>    Subject: Undelivered Mail Returned to Sender
>  MessageID: h274wd530878
>     Report: Could not check ./h274wd530878/ORS details.doc (corrupt)
>     Report: Could not check ./h274wd530878/TDR Research Training Grants
> 2003.doc (corrupt)
>
>    Subject: Undelivered Mail Returned to Sender
>  MessageID: h278AU507615
>     Report: Could not check ./h278AU507615/our transport, our health.doc
> (corrupt)
>
>Strangely enough, only on what appear to be bounces (hence the subject),
>and scanning the
>files from the command-line, it is only Sophos that reports them as 'corrupt'.
>
>Shall I disable Sophos from the 'Virus Scanners' bit of MailScanner.conf,
>or does upgrading to 3.67 solve this?
>
>I've also seen:
>
>    Subject: sending patient data
>  MessageID: h279VD515651
>     Report: Could not check ./h279VD515651/02.zip/02.jpg (part of multi
> volume archive)
>Could not check ./h279VD515651/02.zip (corrupt)
>
>... all 3 of the AV scanners check this zip out OK (just running
>/usr/lib/MailScanner/x-wrapper 02.zip over them,
>unless they need arguments to get them to check zip archives?), so what is
>generating this error?
>
>Thanks...
>
>
>
>--------------------------------------------------------------------------------------------------->
>Peter Bates, Systems Support Officer, Network Support Team.
>London School of Hygiene & Tropical Medicine.
>Telephone:0207-958 8353 / Fax: 0207- 636 9838

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list