Virus still being picked up an hour later

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----


On 19 Jan 2006, at 03:17, Jeff Mills wrote:

>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of  
>> Dhawal
>> Doshy
>> Sent: Thursday, 19 January 2006 2:00 PM
>> To: MailScanner discussion
>> Subject: Re: Virus still being picked up an hour later
>>
>
>>
>> This is precisely what i have been unsuccessfully trying to
>> convey all
>> evening to Julian.. somehow no else seemed to be in this situation..
>>
>> Here's what i observed.. all files (even legit ones) continue to be
>> lying in the MailScanner incoming directory (within their
>> respective PID
>> directory) and do NOT get deleted post batch processing.. as a result
>> MailScanner keeps on checking them again and again..
>>
>> I am at a loss to take it any forward, since i haven't slept
>> all night
>> long trying to figure out the reason.. :-(
>>
>> - dhawal
>>
>
> I hadnt noticed mine scanning clean messages again, but you could  
> be right.
> When I check my incoming dir for that process, there are alot of  
> directories in there - all dated today, and all with a time after I  
> first saw this problem.
> So maybe once this problem rears its head, no more mail processed  
> by this process gets deleted?

Right, I understand the symptom now. What configuration option do you  
think is causing it? What MTA are you using?

Have you run MailScanner in debug mode to see what it prints when  
this happens?

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.4 (Build 4042)

iQEVAwUBQ89U5fw32o+k+q+hAQEd5Qf+NfdqgV+xgfnAXCremq84iM5aX1wEN+Ii
Iit0kweyjThDmfZNYgiTFek+U0EXPga7Jn9MVy+hTurkoAEZEqEi17h86/Qv+A2D
0LVXSgRKnsbq/8bwggq+7CzGZHXt/BN8RiGOCBg5rgQ8YrfpzFDlq1IywQ07SOz6
9Pg5PIsgVN0kYSFBx31WlkxeLUirGBZc9j2bd5d0vfDAWeablnPP76v82WyMjoE8
+RVJOcblAIgucybUZe7ns6u9zxi4jot/xauTJQglOsrTLAYjt+O1RtYcPQ9tFVhG
Ed7r69I4VjH4aKCjmIa0B6z3nzWKyMDSDvlVI44y3PmWYrHgqtPk7g==
=DIco
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.