sophossavi

Julian Field MailScanner at ecs.soton.ac.uk
Sat Jun 4 16:46:06 IST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Can you tell me what your maillog says around the missed virus?

Also, try running an infected batch through MailScanner with it in Debug 
mode, and tell me if it says anything unlikely. (Ignore EOCD signature 
fails, they are just zip file scans that didn't find a zip file).

Julian Field wrote:

> * PGP Signed: 06/04/05 at 16:17:35
>
> I have just tested this on a CentOS (RHEL clone) system, and it works 
> fine. Something is definitely wrong with your setup. That helps me, 
> though it doesn't help you :-(
>
> Incidentally, from your output below, you need to install my combined 
> ClamAV and SA package, as you are missing some of the optional modules 
> for SpamAssassin.
>
> Peter Zimen wrote:
>
>> > Old Bad Signature, Signed by a unverified key
>> This is Perl version 5.008006 (5.8.6)
>>
>> This is MailScanner version 4.43.2
>> Module versions are:
>> 1.00    AnyDBM_File
>> 1.14    Archive::Zip
>> 1.03    Carp
>> 1.119   Convert::BinHex
>> 1.00    DirHandle
>> 1.05    Fcntl
>> 2.73    File::Basename
>> 2.08    File::Copy
>> 2.01    FileHandle
>> 1.06    File::Path
>> 0.16    File::Temp
>> 1.29    HTML::Entities
>> 3.45    HTML::Parser
>> 2.30    HTML::TokeParser
>> 1.21    IO
>> 1.10    IO::File
>> 1.123   IO::Pipe
>> 1.50    Mail::Header
>> 3.05    MIME::Base64
>> 5.417   MIME::Decoder
>> 5.417   MIME::Decoder::UU
>> 5.417   MIME::Head
>> 5.417   MIME::Parser
>> 3.03    MIME::QuotedPrint
>> 5.417   MIME::Tools
>> 0.10    Net::CIDR
>> 1.08    POSIX
>> 1.77    Socket
>> 0.05    Sys::Syslog
>> 1.02    Time::localtime
>>
>> Optional module versions are:
>> 1.810   DB_File
>> 1.08    Digest
>> 1.01    Digest::HMAC
>> 2.33    Digest::MD5
>> 2.10    Digest::SHA1
>> missing Inline
>> missing Mail::ClamAV
>> 3.000003        Mail::SpamAssassin
>> missing Mail::SPF::Query
>> missing Net::CIDR::Lite
>> 0.49    Net::DNS
>> missing Net::LDAP
>> missing Parse::RecDescent
>> 0.30    SAVI
>> missing Sys::Hostname::Long
>> 2.42    Test::Harness
>> 0.47    Test::Simple
>> 1.95    Text::Balanced
>> missing URI
>>
>>
>> ---
>>
>> S pozdravom
>>
>> Peter Zimen
>>
>> On 4.6.2005, at 14:11, Julian Field wrote:
>>
>>> Can someone check this please? I can't get the SAVI module to  
>>> install on my RHEL systems.
>>>
>>> Peter, please can you do a "MailScanner -v" and post the output.
>>>
>>> Peter Zimen wrote:
>>>
>>>
>>>> > Old Bad Signature, Signed by a unverified key
>>>> Hello,
>>>> after upgrade on 4-43.1 version sophossavi not scan for viruses.   
>>>> After start i see:
>>>>
>>>> SophosSAVI 3.94 (engine 2.30) recognizing 105215 viruses
>>>> Jun  4 08:54:50 sandman MailScanner[395]: SophosSAVI using 75 IDE  
>>>> files
>>>>
>>>> but mails from testvirus.org are not scannet. When in   
>>>> MailScanner.conf i switch to sophos - scan is o.k.
>>>>
>>>>
>>>>
>>>> Peter
>>>>
>>>> ------------------------ MailScanner list ------------------------
>>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>> 'leave mailscanner' in the body of the email.
>>>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>> * Thawte Freemail Member <pz at christ-net.sk>
>>>> * Issuer: Thawte Consulting (Pty) Ltd. - Unverified
>>>>
>>>>
>>>
>>> -- 
>>> Julian Field
>>> www.MailScanner.info
>>> Buy the MailScanner book at www.MailScanner.info/store
>>> Professional Support Services at www.MailScanner.biz
>>> MailScanner thanks transtec Computers for their support
>>>
>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>
>>> ------------------------ MailScanner list ------------------------
>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>> 'leave mailscanner' in the body of the email.
>>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>> * Thawte Freemail Member <pz at christ-net.sk>
>> * Issuer: Thawte Consulting (Pty) Ltd. - Unverified
>>
>

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.1 (Build 2185)

iQA/AwUBQqHMvxH2WUcUFbZUEQItEgCgsCkDo8TCX3CRI2U2FjyDItvnkO0An24V
Tmuejl4lE8l8dowIcTSNHBXr
=2SSv
-----END PGP SIGNATURE-----

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list