Bofra-32-Sophos getting through

[Martin Hepworth]

MS scans the entire message - send the infected emails to sophos support
for them to analyse..


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Lang, Michael wrote:
> I am also seeing this problem...
>
> noob question, does MailScanner with Sweep scan the message body?  Is there an option to set for that?
>
> I'm trying to figure out if MailScanner or Sophos is to blame?  And whethter I need to set a different option?
>
> We are running version 4.22-5  --  I know that's an old version but our mail admin hasn't had time to upgrade :(
>
> - Mike
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Ryan Bingham
> Sent: Wednesday, November 10, 2004 2:56 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Bofra-32-Sophos getting through
>
>
> I'm also seeing these slip past Sophos...
>
> On Wed, 2004-11-10 at 10:52 -0500, Steve Swaney wrote:
>
>>________________________________________
>>
>>>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>>>Behalf Of Chris Trudeau
>>>Sent: Wednesday, November 10, 2004 10:32 AM
>>>To: MAILSCANNER at JISCMAIL.AC.UK
>>>Subject: Bofra-32-Sophos getting through
>>
>>>Hello list,
>>
>>>I am concerned that several of the Bofra bugs have gotten through my
>>>mailscanner/sophossavi implementation.
>>
>>>Sophos has released and I have confirmed Bofra IDE files in the libs for
>>>Sophos, but they continue to get through.
>>
>>>Any ideas?
>>
>>What do the logs say about one of the messages that got through?
>>
>>I'd immediately install ClamAV and / or BitDefender to stop additional
>>viruses from getting through.
>>
>>Steve
>>
>>Steve Swaney
>>President
>>Fortress Systems Ltd.
>>www.fsl.com
>>steve.swaney at fsl.com
>>
>>
>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).