f-secure version 4.52

[Julian Field]

Please apply this patch to /usr/lib/MailScanner/MailScanner/SweepViruses.pm
It comes down to a 1 character change to the code :-)

------SNIP-------
--- SweepViruses.pm.old    2003-12-01 16:26:26.000000000 +0000
+++ SweepViruses.pm     2004-02-07 11:37:34.000000000 +0000
@@ -1585,7 +1585,10 @@
      $fsecure_InHeader++;
      return 0;
    }
-  $fsecure_InHeader == 0 or return 0;
+  # This test is more vague than it used to be, but is more tolerant to
+  # output changes such as extra headers. Scanning non-scanning data is
+  # not a great idea but causes no harm.
+  $fsecure_InHeader >= 0 or return 0;

    $report = $line;
    $logout = $line;
------SNIP-------

At 01:09 06/02/2004, you wrote:
>At 19:38 05/02/2004, you wrote:
> >MailScanner E-Mail Virus Scanner version 4.26.8 starting...
> >F-Secure Anti-Virus for Linux version 4.52  build 2461
> >
> >
> >I have posted also in the  mail letter but no responce..
> >
> >Thanks
> >----- Original Message -----
> >From: "Julian Field"
> <<mailto:mailscanner at ecs.soton.ac.uk>mailscanner at ecs.soton.ac.uk>
> >To: "Tim Murphy" <<mailto:tmurphy at icmcontrols.com>tmurphy at icmcontrols.com>
> >Sent: Thursday, February 05, 2004 1:55 PM
> >Subject: Re: Not realy sure where to ask this ? i have posted in a couple of
> >forums.. but no responce
> >
> >
> > > What version of MailScanner and F-Secure are you using?
> > >
> > > The best place to ask is on the MailScanner mailing list. See
> > > <http://www.mailscanner.info>www.mailscanner.info for subscription
> instructions.
> > >
> > > At 14:13 05/02/2004, you wrote:
> > > >Thanks....
> > > >System is  RH / cpanel / exim /
> > > >
> > > >I just installed the new version of MailScanner
> > > >as of right now
> > > >Virus Scanners = rav clamav f-prot f-secure mcafee
> > > >
> > > >Rav  (Registered) (Works)
> > > >Clamav (Free) (Works)
> > > >F-prot (Trial) (Works)
> > > >Mcafee (Trial) (Works)
> > > >F-secure (Registered) (Seems Not To Work)
> > > >
> > > >i can do the command line for f-secure
> > > >/usr/lib/MailScanner/f-secure-wrapper   /opt/f-secure/fsav /tmp
> > > >-And that works
> > > >Database version: 2004-02-05_01
> > > >Scan started at Thu Feb  5 09:05:31 2004
> > > >Scan ended at Thu Feb  5 09:05:32 2004
> > > >11 files scanned
> > > >
> > > >But it is not catching any virus in incoming emails
> > > >---------------paste from email---------------------
> > > >MessageID: 1Aojlz-0002FM-LP
> > > >Report:
> > > >             Rav: ./1Aojlz-0002FM-LP/body.zip->body.txt  .pif Infected:
> > > >
> <<mailto:Win32/Mydoom.A at mm>Win32/Mydoom.A at mm>mailto:Win32/Mydoom.A at mm>Win32/Mydoom.A at mm
> > > >             ClamAV: body.zip contains Worm.SCO.A
> > > >             F-Prot:
> > > >
> /var/spool/MailScanner/incoming/30908/1Aojlz-0002FM-LP/body.zip-body.txt
> > > > Infection:
> <<mailto:W32/Mydoom.A at mm>W32/Mydoom.A at mm>mailto:W32/Mydoom.A at mm>W32/Mydoom.A at mm
> > > >             McAfee: /1Aojlz-0002FM-LP/body.zip        Found the
> > > >
> <<mailto:W32/Mydoom.a at MM>W32/Mydoom.a at MM>mailto:W32/Mydoom.a at MM>W32/Mydoom.a at MM
> virus !!!
> > > >-----------------End Paste-------------------
> > > >I dont see any thing in any of the infected mails about f-secure
> > > >
> > > >----------paste from maillog---------------
> > > >Feb  5 09:01:07 srv1 update.virus.scanners: Found f-secure installed
> > > >Feb  5 09:01:07 srv1 update.virus.scanners: Running autoupdate for
> >f-secure
> > > >-------------End Paste-------------------------
> > > >
> > > >Mailscanner is seeing it..
> > > >
> > > >
> > > >Thanks..
> > > >
> > >
> > > --
> > > Julian Field
> > > <http://www.MailScanner.info>www.MailScanner.info
> > > Professional Support Services at
> <http://www.MailScanner.biz>www.MailScanner.biz
> > > MailScanner thanks transtec Computers for their support
> > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> > >
> > >
> > >
>
>--
>Julian Field
><http://www.MailScanner.info>www.MailScanner.info
>Professional Support Services at
><http://www.MailScanner.biz>www.MailScanner.biz
>MailScanner thanks transtec Computers for their support
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
>

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654