MailScanner ANNOUNCE: Version 4.62.9 released

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Glenn Steen wrote:
> On 31/07/07, Julian Field <MailScanner at ecs.soton.ac.uk> wrote:
>   
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> I have just released a new version of MailScanner, 4.62.9. I don't
>>     
> (snip)
>   
>> - --- New "ClamAV Full Message Scan" setting, and improvements to the
>> ClamAV parser so that the SANESecurity phishing- and spam-detection
>> signatures can be reliably used. Note this new setting is disabled by
>> default, as it has a slight speed impact.
>>     
> (snip)
>
> Enabling this setting isn't only beneficial for ClamAV, but also for
> McAfee ... Note the McAfee line in this report snippet:
> -----
>    Subject: You've received a postcard from a Friend!
>  MessageID: D6DC4E452.39523
> Quarantine: /var/spool/MailScanner/quarantine/20070801/D6DC4E452.39523
>     Report: ClamAV Module:  message was infected: Email.Phishing.RB-1221
>             McAfee: /D6DC4E452.39523.message        Found the
> W32/Zhelatin.gen!eml virus !!!
> -----
> As you can see, it isn't just ClamAV phishing signatures triggering on
> the "complete message" file... Pretty cool side effect:-).
>
> Perhaps makes the name ... less than intuitive:-):-). But since I'll
> want this and always use ClamAV, it's OK by me... Otherwise it'd have
> to be "Antivirus Full Message Scan" or something similar:-).
>   
That's worth knowing. I wrote it for ClamAV's benefit, and the full 
message file will only be put there if you are using one of the ClamAV 
scanner methods. If you only use Mcafee it won't be written.

In the next version it looks like I might need to move the code and 
rename the configuration setting.

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)
Charset: ISO-8859-1

wj8DBQFGsZ0bEfZZRxQVtlQRAo4FAJ9roYMQlgsiBP3ps8prvbRYraVf+wCg3vcW
y69nqnBCFwaXhSw55jjo3Tk=
=Ws7o
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk