{Scanned} Re: {Scanned} Re: {Scanned} Re: Proce ssClamAVOutput : unrecognised line ... contact the authors

[Koen Teugels]

Normal mail and normal zips with eicar test virus are correctly detected.
Only tgz attachment give the problem. I'm in the latest stable versions
op mailscanner, spamassassin , clamav. And i'm using a redhat clone
linux.

thanks koen

Desai, Jason wrote:
      Just to be clear, I'm not talking about your path to
      MailScanner.conf.  Rather I am talking about options in
      MailScanner.conf, specifically, Incoming Work Dir.
 
Jase
-----Original Message-----
From: Koen Teugels [mailto:kte at NEXIS.BE]
Sent: Friday, November 12, 2004 11:17 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: [MAILSCANNER] {Scanned} Re: {Scanned} Re: {Scanned}
Re: ProcessClamAVOutput : unrecognised line ... contact the
authors

      yep , everything is on /etc/Mailscanner/

      Desai, Jason wrote:
            Are you sure all of your paths in your
            MailScanner.conf file are absolute paths
            and do not contain any symbolic links?
 
Jase
-----Original Message-----
From: Koen Teugels [mailto:kte at NEXIS.BE]
Sent: Friday, November 12, 2004 8:46 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: [MAILSCANNER] {Scanned} Re: {Scanned}
Re: ProcessClamAVOutput: unrecognised line ...
contact the authors

      Just did some more testing. And I don't
      think it is the virus scanner. Because I
      tried another one and the virus still
      passes. So i think it must be the unzip /
      tar that has a problem. all tgz have this
      problem.

      Koen

      Koen Teugels wrote:
            Could it be that mailscanner
            has problems with .tgz
            extensions??


            just test the
            copfilter-0.0.95.tgz with
            bitdefender only and he lets
            the
            eicar virus pass. When I put
            the virus direct or in a simple
            zip files
            he doesn't pass.
            But the copfilter-0.0.95.tgz
            virusscan gives as output in
            maillog
            viruses found. But doesn't do
            anything with it.

            thanks Koen


            Julian Field wrote:

                  Please upgrade your
                  clamav to the
                  latest CVS version
                  available from
                  www.clamav.net and
                  try the test again.

                  Koen Teugels wrote:

                        Virus
                        Scanners
                        =
                        clamav
                        bitdefender
                        clamav
                        is at
                        version
                        0.80.1
                        and
                        bitdefender
                        BitDefender-Console-Antivirus-7.0.1-3.linux-gcc3x.i586.rpm
                        Bt they
                        let
                        pass
                        the
                        attachment
                        copfilter-0.0.95.tgz
                        with
                        the
                        eicar
                        test
                        virus
                        in it
                        with
                        status
                        clean.
                        I use
                        a  RHEL
                        clone
                        with
                        the
                        latest
                        yum
                        updates.
                        version
                        MailScanner-4.35.11-1.rpm.tar.gz
                        with
                        spamassassin
                        3.0.1
                        and
                        plugins
                        DCC,
                        razor
                        and ...
                        Just a
                        standard
                        install
                        no
                        custom
                        rules
                        yet.

                        Thanks
                        Koen


------------------------ MailScanner list
------------------------ To unsubscribe, email
jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ
(http://www.mailscanner.biz/maq/)
and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the
website!


------------------------ MailScanner list
------------------------ To unsubscribe, email
jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ
(http://www.mailscanner.biz/maq/)
and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the
website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!


------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!