Scanning outgoing

[Brian Dowling]

On Mon, 7 Jun 2004 18:02:31 -0400, Ugo Bellavance <ugob at CAMO-ROUTE.COM> wrote:

>Brian Dowling wrote:
>
>> On Mon, 7 Jun 2004 12:53:51 -0400, Ugo Bellavance <ugob at CAMO-ROUTE.COM>
wrote:
>>
>>
>>>Brian Dowling wrote:
>>>
>>>
>>>>My understanding is that with sendmail, outgoing messages are scanned,
>>>>although the logs don't reflect any outbound scanning activity. How can
>>>>outbound scanning be confirmed?
>>>
>>>The logs is the place...
>>>
>>>What is your setup?  Do you have an Exchange server that delivers
>>>directly to the recipient?  If so, you must tell this server to use your
>>>MailScanner to deliver.
>>>
>>>
>>>>Thanks
>>>>
>>>>-------------------------- MailScanner list ----------------------
>
>> No exchange server. Sendmail 8.11 on a RH box using pop3 and imap
>> (Squirrelmail as the client). Spamassassin does all the spam tagging.
>>
>> Logs say (for example) on incoming mail...
>>
>> Jun  7 15:04:37 ns1 MailScanner[2268]: New Batch: Scanning 1 messages, 4638
>> bytes
>> Jun  7 15:04:37 ns1 MailScanner[2268]: MCP Checks completed at 4638 bytes
>> per second
>> Jun  7 15:04:37 ns1 MailScanner[2268]: Spam Checks: Starting
>> Jun  7 15:04:37 ns1 MailScanner[2268]: Spam Checks completed at 4638 bytes
>> per second
>> Jun  7 15:04:37 ns1 MailScanner[2268]: Virus and Content Scanning: Starting
>> Jun  7 15:04:38 ns1 MailScanner[2268]: Virus Scanning completed at 4638
>> bytes per second
>> Jun  7 15:04:38 ns1 MailScanner[2268]: Uninfected: Delivered 1 messages
>> Jun  7 15:04:38 ns1 MailScanner[2268]: Virus Processing completed at 4638
>> bytes per second
>> Jun  7 15:04:38 ns1 MailScanner[2268]: Disinfection completed at 4638 bytes
>> per second
>> Jun  7 15:04:38 ns1 MailScanner[2268]: Batch completed at 4638 bytes per
>> second (4638 / 1)
>>
>> Nothing on outgoing mail.
>
>Did you try sending the eicar test virus through?
>

Sent attachments caught in quarantine and sent eicar.com. That's why I'm
wanting to do some log analysis.

>>
>> -------------------------- MailScanner list ----------------------
>> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
>> Before posting, please see the Most Asked Questions at
>> http://www.mailscanner.biz/maq/     and the archives at
>> http://www.jiscmail.ac.uk/lists/mailscanner.html
>>
>
>-------------------------- MailScanner list ----------------------
>To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
>http://www.mailscanner.biz/maq/     and the archives at
>http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html