Help. When a email is found on a blacklist, is the email checked for viruses?

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

It does spam checks first, then virus checks. Which "blacklists" are you
talking about? In MailScanner you can tie a ruleset (and hence a
blacklist) to just about anything.

What is your "Incoming Work Dir" set to? Is it an absolute path or does
it use any links (or soft links)?

Joe Young wrote:

>        Quick question. When the email comes into Mailscanner, does
>Mailscanner check viruses then check the blacklists. Or does Mailscanner
>check blacklists then for viruses. If a email is found in the blacklist does
>the email get scanned for viruses? Is there config settings that I need to
>look at?
>
>        My reason for asking is one of my clients report that he found a
>virus that passed through our filtering server. He reports that
>W32.Mydoom.M at mm  successfully in passing our filter server. The filtering
>server is running
>
>        sendmail                ver.    8.11.6
>        Mailscanner     ver.    4.28.6
>        F-PROT   Prog ver.      4.4.7
>                        Engine ver. 3.14.13
>
>        VIRUS SIGNATURE FILES
>        SIGN.DEF created 30 November 2004
>        SIGN2.DEF created 30 November 2004
>        MACRO.DEF created 29 November 2004
>
>I verified that W32.Mydoom.M at mm was in the virus definitions and that his
>email indeed when through the filter server.  Here is the raw email...
>
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!