Some Mydoom infected mail passing through MailScanner

Pete pete at
Tue Jan 27 12:02:51 GMT 2004

Your Spam Actions say store AND deliver ... doesnt this mean the mail 
will be delivered?

Do you have 2 mailscanner servers, but the configs are different, 
therefore some MyDooms appear to get through, and some are blocked?

Just guessing

Plant, Dean wrote:

>Hello list,
>I have a problem with some copies of Mydoom infected mail still being
>delivered even though MailScanner has correctly detected the virus. I am
>using version 4.21-9 with sendmail, f-prot, clamav on Redhat 8. Is this a
>bug that is fixed in a later version of MailScanner?
>Below is a MailWatch report of one of the delivered infected mails.
>Dean Plant. 
>Received on: 27/01/04 09:41:19 
>Received by: rsys001x 
>Received from: ( - Check in OpenRBL  
>ID: i0R9f8Ud006179 
>Message Headers: Return-Path: <g>
>Received: from ( [])
>by (8.12.8/8.12.8) with ESMTP id i0R9f8Ud006179
>for <xxx at>; Tue, 27 Jan 2004 09:41:08 GMT
>Message-Id: <200401270941.i0R9f8Ud006179 at>
>From: jose at
>To: xxx at
>Subject: Test
>Date: Tue, 27 Jan 2004 09:41:08 +0000
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
>X-Priority: 3
>X-MSMail-Priority: Normal 
>From: jose at 
>To: xxx at 
>Subject: Test 
>Size: 31.3Kb 
>Virus:  Y  
>Blocked File:  N  
>Other Infection:  N  
>Report: F-Prot:
>txt Infection: W32/Mydoom.A at mm ClamAV: contains Worm.SCO.A 
>Spam:  Y   Action(s): store, attachment, deliver 
>High Scoring Spam:  N  
>Listed in RBL:  N  
>Whitelisted:  N  
>SpamAssassin Spam:  Y  
>SpamAssassin Score: 9.52 
>Spam Report: -1.52 BAYES_01   
>2.91 DCC_CHECK   
>0.16 NO_REAL_NAME   
>1.10 RAZOR2_CF_RANGE_51_100   

More information about the MailScanner mailing list