Problems with Virus in a Bounce message ?

[Muenz, Michael]

> what version of MS, what A/V engines?
>
> I think the 4.28 tree should pick these up properly, if not then the
> 4.29 will. Check the changelogs...

I have 4.29.7-1 installed.
AV Scanner is F-Prot (newest version)


> Muenz, Michael wrote:
> > Hi List,
> >
> > now I have a new scenario with my virusscanners.
> > On the first host is Mailscanner installed and routes
> > every mail after scanning to a second one with amavisd-new
> > which scans the mail again.
> > Sometimes viruses gets through. Here's a report of
> > amavisd-new with the statement of Mailscanner
> > "Found to be clean" (pns = Mailscanner, sns = amavisd-new):
> > ------------------------- BEGIN HEADERS -----------------------------
> > Return-Path: <>
> > Received: from pns.maxonline.de (pns.maxonline.de [81.24.64.2])
> >  by sns.maxonline.de (Postfix) with ESMTP id BAABA421FE3
> >  for <XXX>; Mon,  5 Apr 2004 14:09:08 +0200 (CEST)
> > Received: from host.domain.tld (abitz.customer.loomes.de
[212.40.165.111])
> >  by pns.maxonline.de (Postfix) with ESMTP id 8B4F2581CD
> >  for <XXX>; Mon,  5 Apr 2004 14:09:07 +0200 (CEST)
> > Received: by host.domain.tld (Postfix)
> >  id 0309BFA86; Mon,  5 Apr 2004 13:53:59 +0200 (CEST)
> > Date: Mon,  5 Apr 2004 13:53:59 +0200 (CEST)
> > From: MAILER-DAEMON at domain.tld (Mail Delivery System)
> > Subject: Undelivered Mail Returned to Sender
> > To: XXX
> > MIME-Version: 1.0
> > Content-Type: multipart/report; report-type=delivery-status;
> >  boundary="E5B2BFA5C.1081166039/host.domain.tld"
> > Message-Id: <20040405115359.0309BFA86 at host.domain.tld>
> > X-Virus-Status: Found to be clean
> >
> >
> > Any Ideas ? Virus was Sober.F, the mail was quarantined if
> > you want the complete one.
> >
> > - Michael
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>