MailScanner & F-Secure AV

[[ISO-8859-1] David Höhn]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Peter Bates wrote:
| Hello all...
|
| My licence for F-Prot was/is reaching it's annual renewal time, so I
| thought I'd take a quick look at F-Secure.
|
| I have the version for Linux workstations (4.52), and hence the
| command-line scanner version.
|
| When I add 'f-secure' to my list of AV scanners and then watch
| MailScanner kick  it off, I notice it spawns an 'fsav' process (which I
| can see clearly in the f-secure-wrapper), but also a couple of 'fsavd'
| processes.
|
| I'm also suddenly getting messages like the following in my log:
|
| Feb 16 12:56:59 postbox MailScanner[22349]: Scan ended at Wed Feb 16
| 12:56:59 2005
| Feb 16 12:56:59 postbox MailScanner[22349]: 87 files scanned
|
| ... which I presume are coming from F-secure.
yes they are.
|
| Is this normal behaviour?
Yes it is

| Does the fsav launch the fsavd for
| performance reasons, or should fsavd be resident anyway?
|
It should staty resident, since it is needed to load the scan engines
and data definition files.

| Am I just running the wrong version, or making a cheeky assumption I
| can get away with the workstation version?
|
no, it is fine.

| Thanks in advance for any pointers (I've checked the MAQ/FAQ).
|
- --
nee anata wo mitsukete soshite nidoto wasurezu
~      donna ni munega itakutemo soba ni iru no
~                         zutto...zutto...zutto
Key fingerprint = FD77 F0B7 5C65 F546 EB08  A4EC 3CCA 1A32 7E24 291E
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (Darwin)

iD8DBQFCE0ctPMoaMn4kKR4RA3T+AJ9T1zd+EfAKfhAtzFGnjT3CVr+QCgCdFOe9
dPwoYt5lRq49CMkpUZnNsRs=
=fVE3
-----END PGP SIGNATURE-----

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, Text/X-VCARD (charset: UTF-8 "Internet-standard Unicode") ]
    [ (Name: "dh.vcf")  14 lines. ]
    [ Unable to print this part. ]