ClamAV and MailScanner Bug

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Chris Stone wrote:

>On Thursday 05 May 2005 01:54 am, Julian Field wrote:
>
>
>>On 4 May 2005, at 22:16, Chris Stone wrote:
>>
>>
>>>On Wednesday 04 May 2005 02:57 pm, Julian Field wrote:
>>>
>>>
>>>>Julian Field wrote:
>>>>I just tried it with 2 Worm.Sober.P messages from my own servers, and
>>>>neither of them caused any problem whatsoever. Both caught just fine.
>>>>Worked with Maximum Archive Depth = 0 and with = 2.
>>>>
>>>>
>>>This problem is with MS 4.34.8 and ClamAV 0.83, ClamAV Module
>>>(latest from
>>>CPAN). Max Archive Depth = 0.
>>>
>>>
>>Chris, can you try with the latest MailScanner please. I still cannot
>>find anything unusual whatsoever. You are running with
>>
>>Max Archive Depth = 0
>>Virus Scanners = clamavmodule
>>ClamAV 0.83
>>
>>(That's for my reference as people are not being clear as to whether
>>they are using "clamav" or "clamavmodule".
>>
>>
>
>Upgraded to 4.41.3 last night and upgraded ClamAV to 0.84. ClamAVModule is
>0.17. Didn't seem to make a difference. Other viruses are stopped, but Sober
>is detected and queued for delivery.
>
>
My patch to help with this (if you don't have Maximum Archive Depth = 0)
is the latest beta. You may also want the patch I published for
WorkArea.pm earlier this evening as well.

If you still have trouble with both of those updates applied, and you do
not have Maximum Archive Depth = 0 set, then let me know.

Let us all know how you get on with this.

>As I noted in another email, I can get you root access to the server to test
>and poke around if you still need to. Email me offlist and I'll get you the
>particulars.
>
>
>Chris
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!