Mailscanner marking DOS Attack on 2 different servers

[Alex Neuman]

Use ClamAV + BitDefender and split the savings with me ;)

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Thom Paine
Sent: Friday, June 18, 2004 9:26 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Mailscanner marking DOS Attack on 2 different servers

Okay, so more investigation has finally paid off. I've only been working on
this for 5 hours now.
The new DAT files from MacAfee are giving me a segmentation fault when I run
the command to tell me the version number.

Uvscan --version
Shows the proper number of viruses it's scanning for, but segfaults.

I reinstalled uvscan and checked it, and it's okay. When I update the DATs,
it segfaults.

Looks like this is a problem with Mcafee and I don't know how to proceed
from here.

I guess what I have to do in the meantime is set virus scanners = none and
wait for new DAT's from Mcafee.

Anyone else running this same setup? And getting segfaults from mcafee 4367
DATs (June 16 2004)?

Thanks all.


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Spicer, Kevin
Sent: Friday, June 18, 2004 10:15 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Mailscanner marking DOS Attack on 2 different servers


> I have two different servers that just started developing
> problems with
> mailscanner marking all inbound and outbound email a denial of service
> attack.
>
> I've been searching the archives trying to figure out what
> could be wrong,
> but can't really find anything. It seems that maybe it's
> caused by a timeout
> on dns, but nothing has changed on these two servers in many weeks.
>
> Where else could I start troubleshooting this?

It may be that your virus scanner has packed up.

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html