Dumaru again

[Stephan Ilaender]

I have the same problem *without* a rule - Problem is, clamav and f-prot both
can detect DumaRu Virus. But it's not detected when ist passes through
MailScanner. So it's probably not a matter of case sensitive rules.

regards,
Stephan


am 25.03.2004 schrieb Muenz, Michael zum Thema
 ## Dumaru again ##

> Hi,
>
> On my Spamscanner machine I got a copy of that Dumaru worm.
> With SCP i copied it to the machine where F-Prot and MailScanner
> runs and did a manual check with F-Prot:
> Results of virus scanning:
>
> Files: 1
> MBRs: 0
> Boot sectors: 0
> Objects scanned: 3
> Infected: 1
> Suspicious: 0
> Disinfected: 0
> Deleted: 0
> Renamed: 0
>
> ---
>
> But MailScanner hasn't detect it.
> I got a rule in MailScanner for Virus Scan:
> FromOrTo:       @mydomain.de            yes
> FromOrTo:       default                         no
>
> The infected mail was sent to:
> MyDomain.de
> Could it be that writing of rules is case sensitive ?
>
> - Michael
>
>