sophossavi

[Sylvain Phaneuf]

I already had
Allowed Sophos Error Messages = "corrupt"

Any idea about the messages that accumulate badly in mqueue.in?

Sylvain



>>> ronaldj at NETXACTICS.CO.ZA 22/11/2004 13:10:29 >>>
Sure, but if you look at the error msgs, you will see that the msg it
is
getting errors on are not pdf's. Am looking into this and trying to
find a
solution.

Ronald James
NetXactics
Tel: +27 21 680-5069
Fax: +27 21 680-5011
http://www.netxactics.co.za
Sophos - protecting businesses against viruses and spam


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf
Of Martin Hepworth
Sent: 22 November 2004 02:58
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: sophossavi

Sylvain

make sure the following is set in MailScanner.conf

Allowed Sophos Error Messages = "corrupt", "format not supported"

Certain vesions of Sophos seem to have problems with PDF's, this gets
around the issue.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Sylvain Phaneuf wrote:
> I have started using sophossavi this morning. Every now and then, I
get
> the following in the maillog file:
>
> Nov 22 11:37:26 mailscan MailScanner[29415]: SophosSAVI::ERROR::
Sweep
> could not proceed, the file was corrupted (538)::
> ./iAMBZv9T029593/letterXYZ.doc
> Nov 22 11:37:26 mailscan MailScanner[29415]: SophosSAVI::ERROR::
Sweep
> could not proceed, the file was corrupted (538)::
> ./iAMBZv9T029593/msg-29415-30.txt
> Nov 22 11:37:26 mailscan MailScanner[29415]: SophosSAVI::ERROR::
Sweep
> could not proceed, the file was corrupted (538)::
> ./iAMBZx9T029606/msg-29415-18.txt
> Nov 22 11:37:27 mailscan MailScanner[29415]: Virus Scanning:
SophosSAVI
> found 3 infections
>
> After a few minutes of starting MailScanner with sophossavi,
messages
> start accumulating in mqueue.in. They pile up there until I get very
> nervous (>2000 messages), and restart MailScaner with the regullar
> sophos. Sendmail looks OK when this happens.
>
> using Sophos version 3.87, and SAVI perl module 0.25, MS 4.35.11.
>
> Anything obvious comes to mind?
>
> Sylvain
>
>
> ===========================================================
> Sylvain Phaneuf --- Systems Manager   | phone : +44 (0)1865 221323
> Clinical School Information Management Services Unit  (IMSU)
> Medical Sciences Division
> University of Oxford                                  |   email :
> sylvain.phaneuf at imsu.ox.ac.uk
> Room 3A25B John Radcliffe Hospital      |   fax :  +44 (0) 1865
221322
> Oxford   OX3 9DU   England
> ===========================================================
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!