Messages in log unseen before.

[Steen, Glenn]

Ken Goods wrote:
> Ugo Bellavance wrote:
>> Ken Goods wrote:
>>> Ugo Bellavance wrote:
>>> 
>>>> Ken Goods wrote:
>>>> 
>>>>> I've seen quite a few of these in the logs since late last week...
>>>>> 
>>>>> Jun  6 14:30:06 gw-mail MailScanner[14436]: Commercial scanner
>>>>> clamav timed out! Jun  6 14:30:06 gw-mail MailScanner[14436]:
>>>>> Virus Scanning: Denial Of Service attack detected!
>>>>> 
>>>>> Can anyone shed some light? Something I should be concerned about?
>>>> 
>>>> What version of clamAV are you using?
>>>> 
>>> 
>>> 
>>> MailScanner 4.40.11
>>> ClamAV 0.83
>>> Spamassassin 3.0.2
>>> 
>>> I know they are a little dated but would that cause the above
>>> messages? 
>>> 
>> 
>> Possibly for ClamAV.  You should upgrade to 0.85.1.
>> 
>>> Thanks,
>>> Ken
>>> 
>> 
> 
> I upgraded clamav to 0.85.1 last Wednesday and I still get these
> messages: 
> 
> Jun 14 08:25:09 gw-mail MailScanner[5408]: Commercial scanner clamav
> timed out!
> Jun 14 08:25:09 gw-mail MailScanner[5408]: Virus Scanning: Denial Of
> Service attack detected!
> 
> I don't remember ever seeing these before and I couldn't find
> anything with a google or ClamAV site/archive search.
> 
> Can anyone give me a clue as to what these are and whether I should be
> concerned, or are these messages not even generated by MailScanner?
> (in which case I'll post to the clamav list)
> 
> Thanks
> Ken
> 

Is it for every message, or for some? If you run the clamav-wrapper,
does
it take an inordinate time to finish?

-- Glenn

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!