ClamAV module logging changed in 4.62

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Rick Cooper wrote:
>  
>
>  > -----Original Message-----
>  > From: mailscanner-bounces at lists.mailscanner.info 
>  > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
>  > Behalf Of Julian Field
>  > Sent: Monday, August 06, 2007 10:08 AM
>  > To: MailScanner discussion
>  > Subject: Re: ClamAV module logging changed in 4.62
>  > 
>  > -----BEGIN PGP SIGNED MESSAGE-----
>  > Hash: SHA1
>  > 
>  > I'll take a look. I use clamavmodule myself, I have no interest in 
>  > switching to clamd at all.
>  > 
>
>
> Bear in mind that when clamd was added the name of the scanner is taked from
> the structure and not hard coded so if he has the display of virus scanners
> off there would be no name
>   
Good point. That's probably it, I didn't think any of the clamavmodule 
logging should have changed.
> Rick
>
>
>  > Greg Matthews wrote:
>  > > One snag noticed on upgrade to 4.62.9-2 is that the logging of 
>  > > infections for ClamAV module has changed so that instead of:
>  > >
>  > > Jul 22 07:21:12 mailr-w MailScanner[8906]: 
>  > ClamAVModule::INFECTED:: 
>  > > Html.Phishing.Bank.Sanesecurity.05082901:: 
>  > > ./l6M6L5eZ010196/msg-8906-8.html
>  > >
>  > > It now looks like:
>  > >
>  > > Aug  6 09:59:42 mailr-w MailScanner[3719]: INFECTED:: 
>  > > Html.Phishing.Bank.Gen2049.Sanesecurity.07080201:: 
>  > > ./l768xRdk022394/msg-3719-104.html
>  > >
>  > > Note the missing ClamAVModule:: on the log line. Is this a 
>  > casualty of 
>  > > the recent trend to use clamd? I've been perfectly happy with the 
>  > > module until now.
>  > >
>  > > GREG
>  > 
>  > Jules
>  > 
>  > - -- 
>  > Julian Field MEng CITP
>  > www.MailScanner.info
>  > Buy the MailScanner book at www.MailScanner.info/store
>  > 
>  > Need help customising MailScanner?
>  > Contact me!
>  > Need help fixing or optimising your systems?
>  > Contact me!
>  > Need help getting you started solving new requirements from 
>  > your boss?
>  > Contact me!
>  > 
>  > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>  > 
>  > 
>  > -----BEGIN PGP SIGNATURE-----
>  > Version: PGP Desktop 9.6.2 (Build 2014)
>  > Comment: (pgp-secured)
>  > Charset: ISO-8859-1
>  > 
>  > wj8DBQFGtytEEfZZRxQVtlQRAsh+AKC0PPNeh/kog3r3aIvz/S97A+5pfgCePoA/
>  > 4zEhI1utR0Pa3PaFr6vWClM=
>  > =OhH9
>  > -----END PGP SIGNATURE-----
>  > 
>  > -- 
>  > This message has been scanned for viruses and
>  > dangerous content by MailScanner, and is
>  > believed to be clean.
>  > For all your IT requirements visit www.transtec.co.uk
>  > 
>  > --
>  > MailScanner mailing list
>  > mailscanner at lists.mailscanner.info
>  > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>  > 
>  > Before posting, read http://wiki.mailscanner.info/posting
>  > 
>  > Support MailScanner development - buy the book off the website!
>  > 
>  > --
>  > This message has been scanned for viruses and
>  > dangerous content by MailScanner, and is
>  > believed to be clean.
>  > 
>  > 
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>   

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)
Charset: ISO-8859-1

wj8DBQFGt24MEfZZRxQVtlQRAo7jAJ9GPGiIpzV1805QuKwRr4j5PWIrCQCgxTHS
hseB1RQQvycvI77a9+Ual40=
=BYyi
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk