Attachments with denied extensions aren't being blocked

[Mike Kercher]

The thing to keep in mind is that the MailScanner initscript starts your
sendmail processes.

Glad the BFH solved your problem!

Mike


> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of David Pollard
> Sent: Tuesday, April 27, 2004 1:05 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Attachments with denied extensions aren't being blocked
>
> Thanks Mike for the speedy reply.
>
> I'm running f-prot antivirus. The following is its version
> information.
>
> F-PROT ANTIVIRUS
> Program version: 4.4.1
> Engine version: 3.14.11
>
> VIRUS SIGNATURE FILES
> SIGN.DEF created 26 April 2004
> SIGN2.DEF created 26 April 2004
> MACRO.DEF created 21 April 2004
>
> I think my problem just went away.  I rebooted.
> I hate using the big hammer because you never get to know the
> cause of the problem.  I tried sending an email from an
> external user that contained the eicar test virus.  It at
> first failed to be detected.
> Then I rebooted and now it is detected fine and so are the
> executable attachments.
>
> I thought that sendmail and MailScanner worked togeather?
> Here is the output of a couple of ps commands showing 3
> running processes for each.
>
> [root at linuxprod log]# ps -ef | grep sendmail
> root      1784     1  0 15:32 ?        00:00:00 [sendmail]
> smmsp     1789     1  0 15:32 ?        00:00:00 [sendmail]
> root      1795     1  0 15:32 ?        00:00:00 [sendmail]
>
> [root at linuxprod log]# ps -ef | grep MailScanner
> root      1813     1  0 15:32 ?        00:00:00 /usr/bin/perl
> -I/usr/lib/MailScanner /usr/sbin/MailScanner
> /etc/MailScanner/MailScanner.conf
> root      1814  1813  0 15:32 ?        00:00:01 /usr/bin/perl
> -I/usr/lib/MailScanner /usr/sbin/MailScanner
> /etc/MailScanner/MailScanner.conf
> root      1846  1813  0 15:32 ?        00:00:01 /usr/bin/perl
> -I/usr/lib/MailScanner /usr/sbin/MailScanner
> /etc/MailScanner/MailScanner.conf
>
> Regards,
>
>
> David
>
> -----Original Message-----
> From: Mike Kercher [mailto:mike at CAMAROSS.NET]
> Sent: Tuesday, 27 April 2004 3:36 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Attachments with denied extensions aren't being blocked
>
> Is it possible that you have sendmail running in addition to
> MailScanner?
> Which AV product are you using and which version?
>
> Mike
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> For further info about MailScanner, please see the Most Asked
> Questions at    http://www.mailscanner.biz/maq/     and the archives
> at    http://www.jiscmail.ac.uk/lists/mailscanner.html
>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html