Original message-body would be replaced with the virus-warning-text

[Robert Brunner]

thank you for this solution, but any tests does not
solve this problem.

i have re-installed mailscanner to use the original
ms.conf with the minimal needed changes, but
also the same result.

a test with stopped ms, showes me, that the
mail in the incoming-queue have the original
message-body, but after mailscanner the body is
the virus-warning-text.

the debug-mode showes no warnings.
here the log-entries:
Jun 12 21:34:58 lilzmailmt02 MailScanner[11262]: MailScanner E-Mail Virus
Scanner version 4.31.6 starting...
Jun 12 21:34:58 lilzmailmt02 MailScanner[11262]: lock.pl sees Config
LockType =  posix
Jun 12 21:34:58 lilzmailmt02 MailScanner[11262]: lock.pl sees have_module =
0
Jun 12 21:34:58 lilzmailmt02 MailScanner[11262]: Using locktype = posix
Jun 12 21:34:58 lilzmailmt02 MailScanner[11262]: Creating hardcoded
struct_flock subroutine for linux (Linux-type)
Jun 12 21:35:28 lilzmailmt02 MailScanner[11262]: New Batch: Scanning 1
messages, 1889 bytes
Jun 12 21:35:28 lilzmailmt02 MailScanner[11262]: Created attachment dirs for
1 messages
Jun 12 21:35:28 lilzmailmt02 MailScanner[11262]: Virus and Content Scanning:
Starting
Jun 12 21:35:28 lilzmailmt02 MailScanner[11262]: Commencing scanning by
f-secure...
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]:
./1BZEHm-0002wX-3E/eicar.com: Infected: EICAR-Test-File^I[deleted]
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: Virus Scanning: F-Secure
found virus
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: Scan ended at Sat Jun 12
21:35:29 2004
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: 3 files scanned
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: 1 file infected
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: 1 file deleted
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: Completed scanning by
f-secure
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: Virus Scanning: F-Secure
found 1 infections
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: Infected message
1BZEHm-0002wX-3E came from 12.5.19.157
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: Virus Scanning: Found 1
viruses
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: About to deliver 1 messages
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: Silent: Delivered 1
messages containing silent viruses
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: Notices: Warned about 1
messages
Jun 12 21:35:29 lilzmailmt02 MailScanner[11262]: MailScanner child dying of
old age

can this problem come from any install-problem ?

thanks for any support.

Robert
"Arthur Sherman" <cobalt-list at COMPROS.CO.IL> wrote in message
news:200406121426.i5CEQRa04676 at www.compros.co.il...
> >
> > but, if i send an email with a virus the orginal-messagebody
> > would be replaced with the virus-warning-text.
> > and the virus-warning-text is also attached to the email.
> >
> > how can i get the original email and if a virus was attached
> > the virus-warning-txt is only attached ?
> >
> > thanks for any help.
> >
> > Robert
> >
> As far as I know you should check through MailScanner.conf.
> One could set options regarding what to do if virus detected: quarantine,
> deliver, clean etc.
> There are several cummulative options regarding this MS behaviour, but
there
> always is a good explanation commented just before the option.
>
> My 2 cents.
>
>
> Best,
> --
> Arthur Sherman
> ComPros Team
> ISP, WebHosting & Professional Services
>
>
> --
> This message has been scanned for viruses and
> dangerous content by ComPros Team Mail server (mx1), and is
> believed to be clean.
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html