Panda not working

Steen, Glenn Glenn.Steen at AP1.SE
Tue May 10 10:53:13 IST 2005


> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Rick Cooper
> Sent: den 9 maj 2005 21:23
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Panda not working
> 
> 
> > -----Original Message-----
> > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > Behalf Of Rick Cooper
> > Sent: Monday, May 09, 2005 2:12 PM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Panda not working
> >
> [...]
> 
> and to anyone who was listening, I got the SweepViruses.pm 
> patch backward...
> oops.
> 
> Should be:
> 
> --- SweepViruses.pm.new Mon May  9 13:45:52 2005
> +++ SweepViruses.pm     Mon May  9 14:20:41 2005
> @@ -2141,10 +2141,8 @@
> 
>    $logout = $line;
>    $logout =~ s/%/%%/g;
>    $logout =~ s/\s{20,}/ /g;
> -  MailScanner::Log::InfoLog($logout);
> -
>    # EXAMPLE OUTPUT PLEASE? -- nwp 6/5/02
>    # Virus: 2##Base: /var/spool/MailScanner/incoming/24408##1:
> 'h3MENF6X020229/eicar.com' => EICAR-AV-TEST-FILE##2:
> 'h3MENF6X020229/eicar.zip' => EICAR-AV-TEST-FILE##
>    # Now you wish you never asked :-)
> 
> @@ -2156,9 +2154,11 @@
>    {
>          $id = $1;
>          $part = $2;
>          $report = $3;
> -        $report = $Name . ': ' . $report if $Name;
> +        $report = $Name . ": " . $report." found in $part" if $Name;
> +               $report =~ s/\s{2,}/ /g;
> +               MailScanner::Log::InfoLog("%s",$report);
>          $infections->{$id}{$part} .= "$report\n";
>          $types->{$id}{$part} .= "v"; # it's a real virus
>          $numviruses++;
>          $temp = $';
> 
> Sorry
No sweat, we're all human;).
Anyway, I made a similar change while testing, and it was from that
I started smelling something fishy... filenames simply came out
mangled beyond recognition (when actually looking at the filenames,
not the thing coming out of the standard wrapper).

-- Glenn
> 
> Rick
> 
> 
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list