No subject

[Julian Field]

At 00:44 23/02/2004, you wrote:
>I installed the Message.pm patch Julian was so kind enough to send me to fix
>the dumaru-y problem, but now I'm experiencing a new strangeness in
>MailScanner. This message:
>
>Feb 22 19:37:32 iprus MailScanner[6517]: MailScanner E-Mail Virus Scanner
>version 4.27.3 starting...
>Feb 22 19:37:32 iprus MailScanner[6517]: Using locktype = flock
>Feb 22 19:37:32 iprus MailScanner[6517]: New Batch: Scanning 1 messages,
>1414 bytes
>Feb 22 19:37:32 iprus MailScanner[6517]: Virus and Content Scanning:
>Starting
>Feb 22 19:37:34 iprus MailScanner[6517]: >>> Virus 'EICAR-AV-Test' found in
>file ./i1N0aaH06417/eicar.com
>Feb 22 19:37:34 iprus MailScanner[6517]: Virus Scanning: Sophos found 1
>infections
>Feb 22 19:37:34 iprus MailScanner[6517]: Infected message i1N0aaH06417 came
>from 198.31.178.118
>Feb 22 19:37:34 iprus MailScanner[6517]: Virus Scanning: Found 1 viruses
>Feb 22 19:37:34 iprus MailScanner[6517]: Filename Checks: Windows/DOS
>Executable (i1N0aaH06417 eicar.com)
>Feb 22 19:37:34 iprus MailScanner[6517]: Other Checks: Found 1 problems
>Feb 22 19:37:34 iprus MailScanner[6517]: Saved entire message to
>/var/spool/MailScanner/quarantine/20040222/i1N0aaH06417
>Feb 22 19:37:34 iprus MailScanner[6517]: Saved infected "eicar.com" to
>/var/spool/MailScanner/quarantine/20040222/i1N0aaH06417
>
>repeats over and over in the maillog. I tracked a little bit of it down to
>the mqueue.in directory. Apparently, the message is scanned and quarantined,
>but not delivered/deleted from the mqueue.in directory.
>
>Anyone know why?
>
>(Also, Julian, are the header features in the Message.pm script you sent me
>included with the latest beta release of MailScanner?)

Which header features were they? Can't remember.

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654