Version 4.40.11-1 not honoring rules?

Julian Field MailScanner at ecs.soton.ac.uk
Mon Apr 18 09:40:43 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Try this change for SweepViruses.pm:

-----SNIP-----
--- SweepViruses.pm.old    2005-03-07 21:01:27.000000000 +0000
+++ SweepViruses.pm     2005-04-18 09:38:15.416751930 +0100
@@ -666,6 +666,7 @@
     while(defined($id = $BaseDirH->read())) {
       next unless -d "$id";   # Only check directories
       next if $id =~ /^\.+$/; # Don't check myself or my parent
+      next unless
MailScanner::Config::Value('virusscan',$batch->{messages}{id}) =~ /1/;
       # The "./" is important as it gets the path right for parser code
       $success = TryCommercial("./$id", $BaseDir, \%Reports,
                                \%Types, \$NumInfections, $ScanType);
@@ -710,6 +711,8 @@
     #print STDERR "Report merging for \"$id\" and \"$reports\"\n";
     next unless $id && $reports;
     my $message = $batch->{messages}{"$id"};
+    # Skip this message if we didn't actually want it to be scanned.
+    next unless MailScanner::Config::Value('virusscan', $message);
     #print STDERR "Message is $message\n";
     $message->{virusinfected} = 1;

-----SNIP-----

As soon as you can confirm this works for you, I will put out a beta
(for Quentin).

Julian Field wrote:

> What MTA are you using?
>
> Peter Peters wrote:
>
>> Julian Field wrote on 13-4-2005 23:23:
>>
>>> There was a bug in previous versions where it would do a "first
>>> matches"
>>> rule check on the ruleset for "Virus Scanning", which meant it would
>>> scan the message if the "first" recipient in the message requested
>>> scanning.
>>>
>>> It now scans a message if any of the recipients asked for it to be
>>> scanned.
>>
>>
>>
>> It also happens when it's only one recipient who, according to the
>> rules, doesn't want scanning.
>>
>>> Peter Peters wrote:
>>>
>>>> Since the upgrade to 4.40.11-1 MS seems to scan everything for
>>>> virusses
>>>> and spam. Default in rules-files is no. Only some domains are scanned
>>>> according to the rules. After upgrading MS scans all e-mail.
>>>>
>>>> Before the upgrade the log contained lines showing "unscanned"
>>>> messages.
>>>> After the upgrade no more "unscanned" messages are logged and users
>>>> are
>>>> complaining about their messages beeing scanned.
>>>
>>>
>>
>> --
>> Peter Peters, senior beheerder (Security)
>> Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE)
>> Universiteit Twente,  Postbus 217,  7500 AE  Enschede
>> telefoon: 053 - 489 2301, fax: 053 - 489 2383,
>> http://www.utwente.nl/itbe
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list