MailScanner not catching eicar

JD Doelitzsch jd at BARITEC.COM
Sat Oct 1 00:04:48 IST 2005


    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Just a bit of additional info:

I looked in /var/spool/mqueue and found some messages with mailscanner
headers, but it seems like mqueue is collecting alot of files. any way I can
verify that sendmail is using mqueue for outgoing, is it possible that
sendmail is pulling from mqueue.in for outgoing? i don't see any references
for this in sendmail .cf or .mc if that is indeed what it is.

-JD

==============


Hey guys it's been a while since i wrote to the list but once again im
stumped.

Im running Fedora core 1 the latest from RHN, installed clam AV 8.7 and the
lastest MailScanner build. Sendmail is pushing the mail to my "exchange"
server but it doesn't seem like Mailscanner is getting to it. I originally
thought that it was the clamav-wrapper which pointed to /usr/bin instead of
usr/local/bin so once i corrected it worked fine when I ran it. I looked at
the webinfo that said Add the domain name to /etc/mail/relay-domains. I
didn't have that file so I created it with mydomain.com in it. I look at top
and when email comes in I see the sendmail process but no mailscanner or
clamscan. I restart Mailscanner to verify its up and its up.
MailScanner.conf looks okay to me, so im fresh out of ideas. anyone care to
take a shot?

-JD

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list