Problems with Virus in a Bounce message ?

[Martin Hepworth]

Michael

what version of MS, what A/V engines?

I think the 4.28 tree should pick these up properly, if not then the
4.29 will. Check the changelogs...


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Muenz, Michael wrote:
> Hi List,
>
> now I have a new scenario with my virusscanners.
> On the first host is Mailscanner installed and routes
> every mail after scanning to a second one with amavisd-new
> which scans the mail again.
> Sometimes viruses gets through. Here's a report of
> amavisd-new with the statement of Mailscanner
> "Found to be clean" (pns = Mailscanner, sns = amavisd-new):
> ------------------------- BEGIN HEADERS -----------------------------
> Return-Path: <>
> Received: from pns.maxonline.de (pns.maxonline.de [81.24.64.2])
>  by sns.maxonline.de (Postfix) with ESMTP id BAABA421FE3
>  for <XXX>; Mon,  5 Apr 2004 14:09:08 +0200 (CEST)
> Received: from host.domain.tld (abitz.customer.loomes.de [212.40.165.111])
>  by pns.maxonline.de (Postfix) with ESMTP id 8B4F2581CD
>  for <XXX>; Mon,  5 Apr 2004 14:09:07 +0200 (CEST)
> Received: by host.domain.tld (Postfix)
>  id 0309BFA86; Mon,  5 Apr 2004 13:53:59 +0200 (CEST)
> Date: Mon,  5 Apr 2004 13:53:59 +0200 (CEST)
> From: MAILER-DAEMON at domain.tld (Mail Delivery System)
> Subject: Undelivered Mail Returned to Sender
> To: XXX
> MIME-Version: 1.0
> Content-Type: multipart/report; report-type=delivery-status;
>  boundary="E5B2BFA5C.1081166039/host.domain.tld"
> Message-Id: <20040405115359.0309BFA86 at host.domain.tld>
> X-Virus-Status: Found to be clean
>
>
> Any Ideas ? Virus was Sober.F, the mail was quarantined if
> you want the complete one.
>
> - Michael

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************