Mimail virus & Restart

[Julian Field]

At 16:40 05/11/2003, you wrote:
>A couple newbie (MailScanner newbie and Linux newbie) questions:
>
>1) Is this the correct way to block zip files?
>
>deny    ZIP     No Zip temporarily   Zip files temporarily blocked due to
>mimail
>virus

Would be better done as
deny    \.zip$  No Zip temporarily      Zip files tempor......
and remember to separate the 4 fields with tab characters and not spaces.

>2) On RH how do I restart MailScanner without rebooting the server? I found
>this in the documentation, but it doesn't mention restarting sendmail so I
>wanted to confirm that these four commands are all that are needed.
>
>         service sendmail stop
>         chkconfig sendmail off
>         chkconfig --level 2345 MailScanner on
>         service MailScanner start

No, that is for disabling sendmail and enabling MailScanner. All you need
to do to restart sendmail on RH is
         service MailScanner restart



>Thanks for your help,
>Cathy Cramer
>
>
>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
>Behalf Of Miguel Koren O'Brien de Lacy
>Sent: Wednesday, November 05, 2003 04:00 AM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: Mimail virus
>
>
>There are currently 2 problems:
>
>a) Julian wrote a patch that solves a problem with interpreting the
>output from Calm in some cases (Mimail.C)
>b) clamscan 0.6 has a problem opening the zipped file with Mimail.G
>
>So, the best bet today is to block zip files in the configuration.
>Tomorrow there is suppoesed to be a new stable version of Clam which
>solves the problem. hem you can install it and apply the patch. If you
>need this today, any cvs snapshot (of Clam) apparently slves the problem.
>
>There is also another solution by running in the mailing list,
>"--diasble-archive" but I'm not sure what  that really does. I tried it
>and it worked for me.
>
>Miguel
>
>kfliong wrote:
>
> > How come Mimail virus is getting through my mailscanner + clamav
> > setup? Can
> > I  add mimail into my config file like how I added sobig into the
> > config to
> > stop it from coming into my server?
> >
>
>
>
>--
>Esta mensagem foi verificada pelo sistema de antivmrus e
>  acredita-se estar livre de perigo.

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654