Viruses Passing Through MailScanner/Sophos

Julian Field mailscanner at ecs.soton.ac.uk
Mon Aug 16 16:21:34 IST 2004


<x-flowed>
At 15:47 16/08/2004, you wrote:
>Hello,
>
>I've seen this mentioned in previous posts, but I'm not sure if a
>"universal" fix
>is available.
>
>Environment: MailScanner-4.29.7,  Sophos-3.82, Sendmail-8.12.11
>
>Problem: MyDoom-O (and maybe other) viruses occasionally pass through
>MailScanner/Sophos undetected.
>
>Analysis: The infected messages that get past MailScanner/Sophos are
>"multi-bounces",

Can you send me the URL of a copy of one of these messages please.
The last one I saw had corrupted headers, which stopped MailScanner finding
the message buried in the body text. It does try to find all these
"included" messages, but is apparently missing this one for some reason.
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>



More information about the MailScanner mailing list