--mailscanner wont scan emails with virus software {Scanned}

Matt Lowe ms at MLSIS.CO.UK
Wed Sep 24 23:00:40 IST 2003


ok, i'll eat humble pie :)
after changing smtp servers from my external box, i managed to send the eicar virus and had it reconised by the mail server in question :)

I had tryed sending the eicars a while ago, and it didnt apear to scan the email (i was only watching the logs) but i have just relised that my local mailscanner had already sripped the eicars from the email on its way out of my server :(

So panic over, it apears to be scanning ok :)

thanks for your prompt reply

Matt Lowe
www.mlsis.co.uk
ms at mlsis.co.uk


Kevin Miller <Kevin_Miller at CI.JUNEAU.AK.US> wrote ..
> Just for grins, can you send an eicar test pattern (see www.eicar.com)
> to
> yourself from outside the system?  The logs notwithstanding, if the scanner
> is running it should catch it.  Do you actually have RAV and f-prot also
> installed?
>
> ...Kevin
> -------------------
> Kevin Miller                Registered Linux User No: 307357
> CBJ MIS Dept.               Network Systems Administrator, Mail
> Administrator
> 155 South Seward Street     ph: (907) 586-0242
> Juneau, Alaska 99801        fax: (907 586-4500
>
>
> >-----Original Message-----
> >From: Matt Lowe [mailto:ms at MLSIS.CO.UK]
> >Sent: Wednesday, September 24, 2003 12:18 PM
> >To: MAILSCANNER at JISCMAIL.AC.UK
> >Subject: --mailscanner wont scan emails with virus software {Scanned}
> >
> >
> >-----
> >'HELP!'
> >I have Mailscanner 4.23-11 installed on a server with postfix.
> >
> >I have installed mcafee,f-prot and rav virus scanning
> >software, but any emails that come into the mail server, are
> >NOT being scanned :(
> >The subject line is being changed to include the 'scaned' tag,
> >and mailscanner rejects filenames etc corectly, but there is
> >no virus scanning happening :(
> >I can tell the virus software isnt kicking in, because its a
> >trial version of mcafee, and on all my other systems when an
> >email is scanned, mcafee puts a load of junk in the log files
> >saying that it is a trial version, this isnt happening on my
> >new server.
> >
> >my mailscanner.conf file has the following in it :-
> >%report-dir% = /etc/MailScanner/reports/en
> >%etc-dir% = /etc/MailScanner
>
> snip
>
> >
>
> --
> This message has been scanned for viruses and
> dangerous content by the
> www.ms.mlsis.co.uk MailScanner, and is
> believed to be clean.
> Please contact ms at ms.mlsis.co.uk for support.

--
This message has been scanned for viruses and
dangerous content by the
www.ms.mlsis.co.uk MailScanner, and is
believed to be clean.
Please contact ms at ms.mlsis.co.uk for support.



More information about the MailScanner mailing list