Problem with ClamAVModule

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----

On 27 Oct 2005, at 14:01, John Wilcock wrote:

> Denis Beauchemin wrote:
>
>> John Wilcock wrote:
>>
>>> Looks like your clamav is using a French locale, whereas  
>>> MailScanner is no doubt looking for clam's standard English  
>>> messages...
>>>
>>>
>> ClamAV's message is in English:
>> Oct 26 15:07:08 132.210.244.90 MailScanner[28920]:  
>> ClamAVModule::INFECTED:: HTML.Phishing.Bank-1:: ./j9QJ6iY3027535/ 
>> msg-28920-1410.html
>> I agree that MS runs with French locale but it doesn't cause any  
>> problem with McAfee or Bitdefender.  Why would it act this way  
>> with ClamAV?
>>
>
> Sorry, I had a vague recollection of problems parsing certain virus  
> scanner output with the system locale set to French, but on closer  
> inspection I think I was barking up the wrong tree there.

When using either of the module-based virus scanners, the output you  
are seeing from Clam is actually generated by MailScanner itself, and  
there is no provision for translation of the syntax of these lines.  
So, though it might be a problem when using "clamav", the locale does  
not affect "clamavmodule" or "sophossavi".
- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.2 (Build 2425)

iQEVAwUBQ2DdBvw32o+k+q+hAQElqwf9Hj9BykDrZoBAxTi1GZTK4Feu0N2n96sF
7Ya/3krFtJE5j2h64ili4Yx4ryY8wMvvbA+Ic3m8Mj0lwtLgeOgl428U0f1mrH+0
XReOmrFh0F1xXxmYeHQ/bNcq+6ZO+yfKh488yy4cVeFTZFjyFzsAV+fYA2PEe4j4
g2wknqEFrSiriyDI6YfOsVsXo8MTJNdsC2BamxpcC4PwJQ1WsVfSw6bHnPhO3oLY
+93b2KJRkPgkxyQzIemPAOKO2eJxZRACuw2SJQAalpkEGltdubf4pcpWbFaa9apo
BvP/7892SrnykXMsL7ChXWu6ScnyzVb05Z1dnEWSJ4OjIGEHDxRXHA==
=ogH3
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!