some viruse tests failing...is that the antivirus' fault, or MailScanner?

[Stephen Swaney]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Chris Yuzik
> Sent: Saturday, March 20, 2004 6:40 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: some viruse tests failing...is that the antivirus' fault, or
> MailScanner?
>
> Alright. Now I'm talking to myself again. I upgraded ClamAV from 0.67 to
> 0.70-rc, and it fails the same tests. Only now they've inserted a new
> test somewhere around #12, so I fail #20, 21, and 23.
>
> I'm still not sure if this is an issue for MailScanner...or my antivirus
> stuff. Anyone know?
>

The folks that are providing these "free" tests are selling email scanning
services. I just wonder if anyone can pass them all. I'm not saying that
they are not valid, I'm just commenting on the fact that they might not be
un-biased.

Steve
Stephen Swaney
President
Fortress Systems Ltd.
Steve.Swaney at FSL.com

> Cheers,
> Chris
>
>
>
> Chris Yuzik wrote:
>
> > Oops. I suppose I should have mentioned my setup: MailScanner 4.29.3,
> > ClamAV and McAfee.
> >
> > Cheers,
> > Chris
> >
> > Chris Yuzik wrote:
> >
> >> Hi Victor,
> >>
> >> My system failed on exactly the same ones as yours. 19, 20, and 22.
> >>
> >> How do we go about closing off these holes? Is it possible that a
> >> SpamAssassin ruleset could help? Or is this more of a MailScanner
> issue?
> >>
> >> Thanks,
> >> Chris
> >>
> >> Victor DiMichina wrote:
> >>
> >>> When doing a checkup of the mail server,  I found that three tests
> from
> >>> testvirus.org actually failed:
> >>>
> >>> Test #19: Eicar virus within zip file hidden using the "MIME Boundary
> >>> Space Gap Vulnerability"
> >>> Test #20: Eicar virus within zip file hidden using the "Long MIME
> >>> Boundary Vulnerability"
> >>> Test #22: Eicar virus within zip file hidden using the "Empty MIME
> >>> Boundary Vulnerability"
> >>>
> >>> I am using a Red Hat 8.0 machine with CommuniGate Pro,  MailScanner
> >>> 4.28.6 with Panda and F-secure.
> >>> Any suggestions,  is this something I should be concerned about?
> >>>
> >>> thanks!
> >>> Vic
> >>>
> >>
> >
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> Fortress Systems Ltd.
> www.fsl.com
>



--
This message has been scanned for viruses and
dangerous content by Fortress Secure Mail Gateway
and was found to be clean.

Fortress Systems Ltd. - http://www.fsl.com