Mailscanner sends out infected mails

Markus Reinhardt markus.reinhardt at wsl.ch
Wed Jun 16 15:03:01 IST 2004


Desai, Jason wrote:
> Do you have any symbolic links in the Incoming Work Dir
> (/var/spool/MailScanner/incoming)?  Make sure to use the absolute path.
>
You're right. I put in a symbolic link in /var/spool from Mailscanner
to MailScanner. When I checked the MailScanners config which mentioned
the fact of McAfee I'd forgotten to remove this link. Really stupid
mistake!

Thanks for help!
Markus

> Julian, since this misconfiguration is both dangerous and common, can
> MailScanner at start up determine the absolute path, and use that instead?
>
> JaseMailscanner
>
> Markus Reinhardt wrote:
>
>>MailScanner[20004]: Virus and Content Scanning: Starting
>>MailScanner[20004]:
>>/var/spool/MailScanner/incoming/20004/1BaE7W-0005D2-Iw/virus2
>>Found the W32/Netsky.d.eml!exe virus !!!
>>MailScanner[20004]: Virus Scanning: McAfee found 1 infections
>>MailScanner[20004]: Infected message var came from
>>MailScanner[20004]: Virus Scanning: Found 1 viruses
>>MailScanner[20004]: Uninfected: Delivered 1 messages
>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list