No subject

[James Corell]

I installed the Message.pm patch Julian was so kind enough to send me to fix
the dumaru-y problem, but now I'm experiencing a new strangeness in
MailScanner. This message:

Feb 22 19:37:32 iprus MailScanner[6517]: MailScanner E-Mail Virus Scanner
version 4.27.3 starting...
Feb 22 19:37:32 iprus MailScanner[6517]: Using locktype = flock
Feb 22 19:37:32 iprus MailScanner[6517]: New Batch: Scanning 1 messages,
1414 bytes
Feb 22 19:37:32 iprus MailScanner[6517]: Virus and Content Scanning:
Starting
Feb 22 19:37:34 iprus MailScanner[6517]: >>> Virus 'EICAR-AV-Test' found in
file ./i1N0aaH06417/eicar.com
Feb 22 19:37:34 iprus MailScanner[6517]: Virus Scanning: Sophos found 1
infections
Feb 22 19:37:34 iprus MailScanner[6517]: Infected message i1N0aaH06417 came
from 198.31.178.118
Feb 22 19:37:34 iprus MailScanner[6517]: Virus Scanning: Found 1 viruses
Feb 22 19:37:34 iprus MailScanner[6517]: Filename Checks: Windows/DOS
Executable (i1N0aaH06417 eicar.com)
Feb 22 19:37:34 iprus MailScanner[6517]: Other Checks: Found 1 problems
Feb 22 19:37:34 iprus MailScanner[6517]: Saved entire message to
/var/spool/MailScanner/quarantine/20040222/i1N0aaH06417
Feb 22 19:37:34 iprus MailScanner[6517]: Saved infected "eicar.com" to
/var/spool/MailScanner/quarantine/20040222/i1N0aaH06417

repeats over and over in the maillog. I tracked a little bit of it down to
the mqueue.in directory. Apparently, the message is scanned and quarantined,
but not delivered/deleted from the mqueue.in directory.

Anyone know why?

(Also, Julian, are the header features in the Message.pm script you sent me
included with the latest beta release of MailScanner?)


---
James Corell
E-P-C-S
111 West Mitchell, Suite E
Gaylord, MI 49735
(989) 732-1366