Attachments with denied extensions aren't being blocked

[David Pollard]

Thanks Mike for the speedy reply.

I'm running f-prot antivirus. The following is its version information.

F-PROT ANTIVIRUS
Program version: 4.4.1
Engine version: 3.14.11

VIRUS SIGNATURE FILES
SIGN.DEF created 26 April 2004
SIGN2.DEF created 26 April 2004
MACRO.DEF created 21 April 2004

I think my problem just went away.  I rebooted.
I hate using the big hammer because you never get to know the cause of
the problem.  I tried sending an email from an external user that
contained the eicar test virus.  It at first failed to be detected.
Then I rebooted and now it is detected fine and so are the executable
attachments.

I thought that sendmail and MailScanner worked togeather?
Here is the output of a couple of ps commands showing 3 running
processes for each.

[root at linuxprod log]# ps -ef | grep sendmail
root      1784     1  0 15:32 ?        00:00:00 [sendmail]
smmsp     1789     1  0 15:32 ?        00:00:00 [sendmail]
root      1795     1  0 15:32 ?        00:00:00 [sendmail]

[root at linuxprod log]# ps -ef | grep MailScanner
root      1813     1  0 15:32 ?        00:00:00 /usr/bin/perl
-I/usr/lib/MailScanner /usr/sbin/MailScanner
/etc/MailScanner/MailScanner.conf
root      1814  1813  0 15:32 ?        00:00:01 /usr/bin/perl
-I/usr/lib/MailScanner /usr/sbin/MailScanner
/etc/MailScanner/MailScanner.conf
root      1846  1813  0 15:32 ?        00:00:01 /usr/bin/perl
-I/usr/lib/MailScanner /usr/sbin/MailScanner
/etc/MailScanner/MailScanner.conf

Regards,
 
 
David 

-----Original Message-----
From: Mike Kercher [mailto:mike at CAMAROSS.NET] 
Sent: Tuesday, 27 April 2004 3:36 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Attachments with denied extensions aren't being blocked

Is it possible that you have sendmail running in addition to
MailScanner?
Which AV product are you using and which version?

Mike

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html