4.43.1 sophossavi testing

[Jeff A. Earickson]

Julian,

My testing of the sophossavi tweak:

1) Email encrypted xls file, settings are:
Allowed Sophos Error Messages = "File was encrypted"
Virus Scanners = sophos clamavmodule

Email delivered, no complaints in syslog (OK)

2) Email encrypted xls file, settings are:
Allowed Sophos Error Messages = "File was encrypted"
Virus Scanners = sophossavi clamavmodule

Email delivered, but MailScanner syslogged:

SophosSAVI::ERROR:: File was encrypted (530):: ./j52JOpu2020635/94237001F.xls

I would expect MailScanner to be quiet like the "sophos"
setting.  People will think that a bad file had slipped thru.

3) Email encrypted xls file, settings are:
Allowed Sophos Error Messages = 
Virus Scanners = sophos clamavmodule

THE MESSAGE GOT DELIVERED!!  No complaints in syslog,
landed in the recipient's mail.  A bad file DID slip thru.

3) Email encrypted xls file, settings are:
Allowed Sophos Error Messages = 
Virus Scanners = sophossavi clamavmodule

Properly blocked, noted in syslog, not delivered (OK).

Jeff Earickson
Colby College

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!