Viruses apparently getting through

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Gib Gilbertson Jr. wrote:

> At 05:43 PM 3/12/2005, you wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Where is your copy of ClamAV installed? The location must be correct in
>> /etc/MailScanner/virus.scanners.conf.
>> If "which clamscan" produces /usr/local/bin/clamscan, then the entry in
>> virus.scanners.conf should be "/usr/local", if it produces
>> /usr/bin/clamscan, then it should be "/usr".
>>
>> What does your maillog say? That should give some indication of what
>> it's finding.
>
>
> One thing I'm wondering about is why MailScanner isn't rejecting the 
> file based on the file extension since it's set to deny in the 
> filename.rules.conf file.
>
> deny    \.zm9$

Do you have the 2 logging and user report strings after that? There must 
be 4 fields in each line in that file, or it will ignore the line (and 
should log the syntax error).

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!