Panda not working
Steen, Glenn
Glenn.Steen at AP1.SE
Tue May 10 10:53:13 IST 2005
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Rick Cooper
> Sent: den 9 maj 2005 21:23
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Panda not working
>
>
> > -----Original Message-----
> > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > Behalf Of Rick Cooper
> > Sent: Monday, May 09, 2005 2:12 PM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Panda not working
> >
> [...]
>
> and to anyone who was listening, I got the SweepViruses.pm
> patch backward...
> oops.
>
> Should be:
>
> --- SweepViruses.pm.new Mon May 9 13:45:52 2005
> +++ SweepViruses.pm Mon May 9 14:20:41 2005
> @@ -2141,10 +2141,8 @@
>
> $logout = $line;
> $logout =~ s/%/%%/g;
> $logout =~ s/\s{20,}/ /g;
> - MailScanner::Log::InfoLog($logout);
> -
> # EXAMPLE OUTPUT PLEASE? -- nwp 6/5/02
> # Virus: 2##Base: /var/spool/MailScanner/incoming/24408##1:
> 'h3MENF6X020229/eicar.com' => EICAR-AV-TEST-FILE##2:
> 'h3MENF6X020229/eicar.zip' => EICAR-AV-TEST-FILE##
> # Now you wish you never asked :-)
>
> @@ -2156,9 +2154,11 @@
> {
> $id = $1;
> $part = $2;
> $report = $3;
> - $report = $Name . ': ' . $report if $Name;
> + $report = $Name . ": " . $report." found in $part" if $Name;
> + $report =~ s/\s{2,}/ /g;
> + MailScanner::Log::InfoLog("%s",$report);
> $infections->{$id}{$part} .= "$report\n";
> $types->{$id}{$part} .= "v"; # it's a real virus
> $numviruses++;
> $temp = $';
>
> Sorry
No sweat, we're all human;).
Anyway, I made a similar change while testing, and it was from that
I started smelling something fishy... filenames simply came out
mangled beyond recognition (when actually looking at the filenames,
not the thing coming out of the standard wrapper).
-- Glenn
>
> Rick
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list