ClamAV module logging changed in 4.62

Julian Field MailScanner at ecs.soton.ac.uk
Mon Aug 6 19:52:57 IST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Rick Cooper wrote:
>  
>
>  > -----Original Message-----
>  > From: mailscanner-bounces at lists.mailscanner.info 
>  > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
>  > Behalf Of Julian Field
>  > Sent: Monday, August 06, 2007 10:08 AM
>  > To: MailScanner discussion
>  > Subject: Re: ClamAV module logging changed in 4.62
>  > 
>  > -----BEGIN PGP SIGNED MESSAGE-----
>  > Hash: SHA1
>  > 
>  > I'll take a look. I use clamavmodule myself, I have no interest in 
>  > switching to clamd at all.
>  > 
>
>
> Bear in mind that when clamd was added the name of the scanner is taked from
> the structure and not hard coded so if he has the display of virus scanners
> off there would be no name
>   
Good point. That's probably it, I didn't think any of the clamavmodule 
logging should have changed.
> Rick
>
>
>  > Greg Matthews wrote:
>  > > One snag noticed on upgrade to 4.62.9-2 is that the logging of 
>  > > infections for ClamAV module has changed so that instead of:
>  > >
>  > > Jul 22 07:21:12 mailr-w MailScanner[8906]: 
>  > ClamAVModule::INFECTED:: 
>  > > Html.Phishing.Bank.Sanesecurity.05082901:: 
>  > > ./l6M6L5eZ010196/msg-8906-8.html
>  > >
>  > > It now looks like:
>  > >
>  > > Aug  6 09:59:42 mailr-w MailScanner[3719]: INFECTED:: 
>  > > Html.Phishing.Bank.Gen2049.Sanesecurity.07080201:: 
>  > > ./l768xRdk022394/msg-3719-104.html
>  > >
>  > > Note the missing ClamAVModule:: on the log line. Is this a 
>  > casualty of 
>  > > the recent trend to use clamd? I've been perfectly happy with the 
>  > > module until now.
>  > >
>  > > GREG
>  > 
>  > Jules
>  > 
>  > - -- 
>  > Julian Field MEng CITP
>  > www.MailScanner.info
>  > Buy the MailScanner book at www.MailScanner.info/store
>  > 
>  > Need help customising MailScanner?
>  > Contact me!
>  > Need help fixing or optimising your systems?
>  > Contact me!
>  > Need help getting you started solving new requirements from 
>  > your boss?
>  > Contact me!
>  > 
>  > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>  > 
>  > 
>  > -----BEGIN PGP SIGNATURE-----
>  > Version: PGP Desktop 9.6.2 (Build 2014)
>  > Comment: (pgp-secured)
>  > Charset: ISO-8859-1
>  > 
>  > wj8DBQFGtytEEfZZRxQVtlQRAsh+AKC0PPNeh/kog3r3aIvz/S97A+5pfgCePoA/
>  > 4zEhI1utR0Pa3PaFr6vWClM=
>  > =OhH9
>  > -----END PGP SIGNATURE-----
>  > 
>  > -- 
>  > This message has been scanned for viruses and
>  > dangerous content by MailScanner, and is
>  > believed to be clean.
>  > For all your IT requirements visit www.transtec.co.uk
>  > 
>  > --
>  > MailScanner mailing list
>  > mailscanner at lists.mailscanner.info
>  > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>  > 
>  > Before posting, read http://wiki.mailscanner.info/posting
>  > 
>  > Support MailScanner development - buy the book off the website!
>  > 
>  > --
>  > This message has been scanned for viruses and
>  > dangerous content by MailScanner, and is
>  > believed to be clean.
>  > 
>  > 
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>   

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)
Charset: ISO-8859-1

wj8DBQFGt24MEfZZRxQVtlQRAo7jAJ9GPGiIpzV1805QuKwRr4j5PWIrCQCgxTHS
hseB1RQQvycvI77a9+Ual40=
=BYyi
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk



More information about the MailScanner mailing list