Problem with ClamAVModule

[Denis Beauchemin]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Julian Field wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>
>On 27 Oct 2005, at 14:01, John Wilcock wrote:
>
>  
>
>>Denis Beauchemin wrote:
>>
>>    
>>
>>>John Wilcock wrote:
>>>
>>>      
>>>
>>>>Looks like your clamav is using a French locale, whereas  
>>>>MailScanner is no doubt looking for clam's standard English  
>>>>messages...
>>>>
>>>>
>>>>        
>>>>
>>>ClamAV's message is in English:
>>>Oct 26 15:07:08 132.210.244.90 MailScanner[28920]:  
>>>ClamAVModule::INFECTED:: HTML.Phishing.Bank-1:: ./j9QJ6iY3027535/ 
>>>msg-28920-1410.html
>>>I agree that MS runs with French locale but it doesn't cause any  
>>>problem with McAfee or Bitdefender.  Why would it act this way  
>>>with ClamAV?
>>>
>>>      
>>>
>>Sorry, I had a vague recollection of problems parsing certain virus  
>>scanner output with the system locale set to French, but on closer  
>>inspection I think I was barking up the wrong tree there.
>>    
>>
>
>When using either of the module-based virus scanners, the output you  
>are seeing from Clam is actually generated by MailScanner itself, and  
>there is no provision for translation of the syntax of these lines.  
>So, though it might be a problem when using "clamav", the locale does  
>not affect "clamavmodule" or "sophossavi".
>  
>

Julian,

Then how could we explain the fact that MS logged an infected file but 
sent it anyways to the user?  Do I have something amiss in my config?

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!