MailScanner List problem continues.....

[Richard Alexander]

I am still having issues receiving the mailscanner list since my upgrade
to MS 4.26.7 and SA 2.63 on red hat 9.0.  I added *@JISCMAIL.AC.UK to my
spam.whitelist.conf file and that worked for a couple days. Now it is
showing that there is a virus.zip file in the email from the list and that
is concerning me.  FYI..from a previous post and instructions from Julian
I am blocking zip attachments by default and allowing from several
approved domains.  I checked the quarantine and there is a file named
virus.zip.  Looked at the contents and there is a ms_virus file. Below is
the maillog entry. I know i can add an entry to my filename.rules.conf to
allow from the list, but I'm trying to figure out why there is an
attachment instead of just html email?

maillog:
Feb 23 17:49:45 inet sendmail[23651]: i1NNngbB023651: from=<owner-
MAILSCANNER at JISCMAIL.AC.UK>, size=187459, class=-30, nrcpts=1,
msgid=<200402232349.i1NNngbB023651 at inet.hoodindustries.com>, proto=SMTP,
daemon=MTA, relay=smtp.jiscmail.ac.uk [130.246.192.48] Feb 23 17:49:45
inet MailScanner[17570]: New Batch: Scanning 1 messages, 188088 bytes Feb
23 17:49:45 inet MailScanner[17570]: Spam Checks: Starting Feb 23 17:49:51
inet MailScanner[17570]: Virus and Content Scanning: Starting Feb 23
17:49:51 inet MailScanner[17570]: Filename Checks:  (i1NNngbB023651
virus.zip)
Feb 23 17:49:52 inet MailScanner[17570]: Other Checks: Found 1 problems
Feb 23 17:49:52 inet MailScanner[17570]: Saved infected "virus.zip"
to /var/spool/MailScanner/quarantine/20040223/i1NNngbB023651
Feb 23 17:49:52 inet MailScanner[17570]: Looked up unknown string report
in language translation file /etc/MailScanner/reports/en/languages.conf