Bofra-32-Sophos getting through

[Lang, Michael]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

I am also seeing this problem...

noob question, does MailScanner with Sweep scan the message body?  Is there an option to set for that?

I'm trying to figure out if MailScanner or Sophos is to blame?  And whethter I need to set a different option?

We are running version 4.22-5  --  I know that's an old version but our mail admin hasn't had time to upgrade :(

- Mike

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of Ryan Bingham
Sent: Wednesday, November 10, 2004 2:56 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Bofra-32-Sophos getting through


I'm also seeing these slip past Sophos...

On Wed, 2004-11-10 at 10:52 -0500, Steve Swaney wrote:
> ________________________________________
> > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> > Behalf Of Chris Trudeau
> > Sent: Wednesday, November 10, 2004 10:32 AM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Bofra-32-Sophos getting through
>
> > Hello list,
>
> > I am concerned that several of the Bofra bugs have gotten through my
> > mailscanner/sophossavi implementation.
>
> > Sophos has released and I have confirmed Bofra IDE files in the libs for
> > Sophos, but they continue to get through.
>
> > Any ideas?
>
> What do the logs say about one of the messages that got through?
>
> I'd immediately install ClamAV and / or BitDefender to stop additional
> viruses from getting through.
>
> Steve
>
> Steve Swaney
> President
> Fortress Systems Ltd.
> www.fsl.com
> steve.swaney at fsl.com
>
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).