SV: Denial of Service attack in message!

[Göran Höglund]

Hi The output is:
>./uvscan --version -d dat
Virus Scan for Solaris v4.14.0
Copyright (c) 1992-2003 Networks Associates Technology Inc. All rights
reserved.
(408) 988-3832  LICENSED COPY - Jan 18 2001
 
Scan engine v4.1.40 for Solaris.
Virus data file v4367 created Jun 16 2004
Scanning for 92006 viruses, trojans and variants.

> 
But after I upgraded the MailScanner as well as the uvscan software I
got rid of the problem.

Regards Göran

-----Ursprungligt meddelande-----
Från: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] För
Thom Paine
Skickat: den 23 juni 2004 15:11
Till: MAILSCANNER at JISCMAIL.AC.UK
Ämne: Re: Denial of Service attack in message!


What does mcafee report when you run the command

Uvscan --version?

It should tell you the engine, and the dat. If it says segmentation
fault, you have the old engine.

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Göran Höglund
Sent: Wednesday, June 23, 2004 3:36 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: SV: Denial of Service attack in message!


Hi,
Well, I'm sorry to say this did not help. I still get a lot of denial of
service tagged mails. As I have written in an other mail I also have
problems with the logging from MailScanner. I guess I should start there
and upgrade MailScanner to the latest version.

Göran

-----Ursprungligt meddelande-----
Från: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] För
Thom Paine
Skickat: den 22 juni 2004 15:00
Till: MAILSCANNER at JISCMAIL.AC.UK
Ämne: Re: Denial of Service attack in message!


Yes.
I went through this last Friday.

You need to upgrade the engine in mcafee. Currently you are running
4.1.6.0. The newest one is 4.3.2.0.

You can get it from ftp.nai.com and the file you are looking for is
elnx4320.zip. It can be extracted by gunzip. Just place in your
/usr/local/uvscan folder and unzip it.

Then run a uvscan --version to check your engine rev level.

If you check it before you update it, you get Segmentation Fault.

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Göran Höglund
Sent: Tuesday, June 22, 2004 8:42 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Denial of Service attack in message!


Hi!
Suddenly last Wendsday I started to get Virus detected within some mails
parsed by MailScanner.

This seems to be "found" randomlly and has increased since then. 

I am running version:
$MailScanner::Config::MailScannerVersion = '4.21-9';
On Solaris 8. the virus program is mcafee.

Has anybody else experienced this problem latlly, I mean can this be
caused by mcafee????

Göran

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html