FW: MailScanner not catching eicar

[JD Doelitzsch]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Thanks for the help guys, I appreciate it. Julian, I changed the
virus.scanners.conf instead. I don't know what I was thinking, everything
else is a .conf. On a side note, I remember hearing someone on this list
mention a milter that creates a dummy address for spam bait that will
blacklist the sending ip for x amount of days. Anyone remember what it was
called?

-JD

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of Julian Field
Sent: Saturday, October 01, 2005 6:37 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: FW: MailScanner not catching eicar


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

One extra point. Don't change the -wrapper scripts, that's wrong and
will be overwritten the next time you upgrade. What you should be doing
is editing /etc/MailScanner/virus.scanners.conf as that tells
MailScanner where the virus scanners are installed.

You don't ever have to change my code, there are configuratioon files to
do what you want.

JD Doelitzsch wrote:

>-----Original Message-----
>From: JD Doelitzsch [mailto:jd at baritec.com]
>Sent: Friday, September 30, 2005 2:46 PM
>To: MailScanner mailing list
>Subject: MailScanner not catching eicar
>
>
>Hey guys it's been a while since i wrote to the list but once again im
>stumped.
>
>Im running Fedora core 1 the latest from RHN, installed clam AV 8.7 and the
>lastest MailScanner build. Sendmail is pushing the mail to my "exchange"
>server but it doesn't seem like Mailscanner is getting to it. I originally
>thought that it was the clamav-wrapper which pointed to /usr/bin instead of
>usr/local/bin so once i corrected it worked fine when I ran it. I looked at
>the webinfo that said Add the domain name to /etc/mail/relay-domains. I
>didn't have that file so I created it with mydomain.com in it. I look at
top
>and when email comes in I see the sendmail process but no mailscanner or
>clamscan. I restart Mailscanner to verify its up and its up.
>MailScanner.conf looks okay to me, so im fresh out of ideas. anyone care to
>take a shot?
>
>-JD
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>

- --
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.2 (Build 2424)

iQA/AwUBQz6Q7hH2WUcUFbZUEQJ5dQCghbcxwL3qll1Map7aUS2+eWz98EMAnRls
nDBV/OC566GtsJ8MoNeSmdN9
=6mqt
-----END PGP SIGNATURE-----

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!