{Scanned} Re: {Scanned} Re: {Scanned} Re: Proce ssClamAVOutput : unrecognised line ... contact the authors

Koen Teugels kte at NEXIS.BE
Fri Nov 12 18:22:48 GMT 2004


this is my installlation

This is Tao Linux release 1 (Mooch Update 3)
This is Perl version 5.008000 (5.8.0)

This is MailScanner version 4.35.11
Module versions are:
1.00    AnyDBM_File
1.14    Archive::Zip
1.01    Carp
1.119   Convert::BinHex
1.00    DirHandle
1.04    Fcntl
2.71    File::Basename
2.05    File::Copy
2.01    FileHandle
1.05    File::Path
0.13    File::Temp
1.23    HTML::Entities
3.26    HTML::Parser
2.24    HTML::TokeParser
1.20    IO
1.09    IO::File
1.122   IO::Pipe
3.05    MIME::Base64
5.415   MIME::Decoder
5.415   MIME::Decoder::UU
5.415   MIME::Head
5.415   MIME::Parser
3.03    MIME::QuotedPrint
5.415   MIME::Tools
0.09    Net::CIDR
1.05    POSIX
1.75    Socket
0.03    Sys::Syslog
1.02    Time::localtime

Optional module versions are:
1.806   DB_File
1.08    Digest
1.01    Digest::HMAC
2.33    Digest::MD5
2.01    Digest::SHA1
missing Inline
missing Mail::ClamAV
3.000001        Mail::SpamAssassin
missing Mail::SPF::Query
missing Net::CIDR::Lite
0.48    Net::DNS
0.31    Net::LDAP
missing Parse::RecDescent
missing SAVI
missing Sys::Hostname::Long
2.26    Test::Harness
0.47    Test::Simple
1.89    Text::Balanced
1.19    URI


Is there something missing ??

thanks Koen

Koen Teugels wrote:
      Normal mail and normal zips with eicar test virus are
      correctly detected. Only tgz attachment give the problem. I'm
      in the latest stable versions op mailscanner, spamassassin ,
      clamav. And i'm using a redhat clone linux.

      thanks koen

      Desai, Jason wrote:
            Just to be clear, I'm not talking about your path
            to MailScanner.conf.  Rather I am talking about
            options in MailScanner.conf, specifically,
            Incoming Work Dir.
 
Jase
-----Original Message-----
From: Koen Teugels [mailto:kte at NEXIS.BE]
Sent: Friday, November 12, 2004 11:17 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: [MAILSCANNER] {Scanned} Re: {Scanned} Re:
{Scanned} Re: ProcessClamAVOutput : unrecognised line
... contact the authors

      yep , everything is on /etc/Mailscanner/

      Desai, Jason wrote:
            Are you sure all of your paths in
            your MailScanner.conf file are
            absolute paths and do not contain any
            symbolic links?
 
Jase
-----Original Message-----
From: Koen Teugels [mailto:kte at NEXIS.BE]
Sent: Friday, November 12, 2004 8:46 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: [MAILSCANNER] {Scanned} Re:
{Scanned} Re: ProcessClamAVOutput:
unrecognised line ... contact the authors

      Just did some more testing. And I
      don't think it is the virus scanner.
      Because I tried another one and the
      virus still passes. So i think it
      must be the unzip / tar that has a
      problem. all tgz have this problem.

      Koen

      Koen Teugels wrote:
            Could it be that
            mailscanner has problems
            with .tgz extensions??


            just test the
            copfilter-0.0.95.tgz with
            bitdefender only and he
            lets the
            eicar virus pass. When I
            put the virus direct or
            in a simple zip files
            he doesn't pass.
            But the
            copfilter-0.0.95.tgz
            virusscan gives as output
            in maillog
            viruses found. But
            doesn't do anything with
            it.

            thanks Koen


            Julian Field wrote:

                  Please
                  upgrade your
                  clamav to the
                  latest CVS
                  version
                  available
                  from
                  www.clamav.net
                  and try the
                  test again.

                  Koen Teugels
                  wrote:

                        Virus
                        Scanners
                        =
                        clamav
                        bitdefender
                        clamav
                        is
                        at
                        version
                        0.80.1
                        and
                        bitdefender
                        BitDefender-Console-Antivirus-7.0.1-3.linux-gcc3x.i586.rpm
                        Bt
                        they
                        let
                        pass
                        the
                        attachment
                        copfilter-0.0.95.tgz
                        with
                        the
                        eicar
                        test
                        virus
                        in
                        it
                        with
                        status
                        clean.
                        I
                        use
                        a 
                        RHEL
                        clone
                        with
                        the
                        latest
                        yum
                        updates.
                        version
                        MailScanner-4.35.11-1.rpm.tar.gz
                        with
                        spamassassin
                        3.0.1
                        and
                        plugins
                        DCC,
                        razor
                        and
                        ...
                        Just
                        a
                        standard
                        install
                        no
                        custom
                        rules
                        yet.

                        Thanks
                        Koen


------------------------ MailScanner list
------------------------ To unsubscribe, email
jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ
(http://www.mailscanner.biz/maq/)
and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book
off the website!


------------------------ MailScanner list
------------------------ To unsubscribe, email
jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ
(http://www.mailscanner.biz/maq/)
and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the
website!

------------------------ MailScanner list
------------------------ To unsubscribe, email
jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ
(http://www.mailscanner.biz/maq/)
and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the
website!


------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!


------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list