Scanning outgoing

[Brian Dowling]

On Mon, 7 Jun 2004 17:55:01 +0100, Julian Field
<mailscanner at ECS.SOTON.AC.UK> wrote:

>At 14:18 07/06/2004, you wrote:
>>My understanding is that with sendmail, outgoing messages are scanned,
>>although the logs don't reflect any outbound scanning activity. How can
>>outbound scanning be confirmed?
>
>Are you using a sendmail recent enough to have a clientmqueue directory? If
>so, all outbound mail should be scanned. If not, then you will have to
>reconfigure your mail software so that it sends mail by talking SMTP to
>localhost and does not invoke the sendmail binary directly.
>
>You can find out by sending yourself mail including the eicar test file,
>available from www.eicar.org.
>--
>Julian Field
>www.MailScanner.info
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>-------------------------- MailScanner list ----------------------
>To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
>http://www.mailscanner.biz/maq/     and the archives at
>http://www.jiscmail.ac.uk/lists/mailscanner.html

Aparrently the version of sendmail is not recent enough.

Don't understand your comment
"If not, then you will have to
reconfigure your mail software so that it sends mail by talking SMTP to
localhost and does not invoke the sendmail binary directly."

Here's what I have...

Sendamail 8.11.6
mailscanner.conf - Outgoing Queue Dir = /var/spool/mqueue
/etc/init.d/MailScanner - StartOutSendmail - seems only to set QTime and PID

Directories I have...
/var/spool/mailscanner/incoming
/var/spool/mailscanner/quarantine
/var/spool/mqueue
/var/spool/mqueue.in

Perhaps the mqueue dir is a leftover after an upgrade of something.

Would sure like some verbose virus logging as I do with spamd using the -D
option.

Thanks!
Brian

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html