Mailscanner Clamd scanner module does not detect virus with /

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Can you send me a sample message so that I can have something to work 
with please?
I obviously need to fix this, preferably before the next stable release 
later this week.

Adri Koppes wrote:
> I recently switched from ClamAVModule to using Clamd with MailScanner
> 4.61.7.
> I also use the extra clamav database MSRBL-Images and MSRBL-SPAM from
> www.msrbl.com.
> Some definitions in MSRBL-Images contain virus names with '/'
> characters.
> When clamd detects such an images it gives a message like:
>
> /usr/local/etc/MailScanner/incoming/69469/l7S87Zuk071123/1.gif:
> MSRBL-Images/0-0
> -wgrZ FOUND
>
> However MailScanner does NOT detect the message as being infected.
> Using the ClamAVModule scanner, the message is correctly identified as
> being infected.
> Probably this is due to some special path handling in SweepViruses.pm
> for the ClamD module.
>
> Best regards,
>
> A. Koppes
> SalesManager Software B.V.
>
>
>   

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)
Comment: (pgp-secured)
Charset: ISO-8859-1

wj8DBQFG1ARiEfZZRxQVtlQRAm1SAKCc1w7LLzI2M9lJ44BbpwcYnSfVIACgkdaO
Q/T//7IlxLFae7UiV9t9ZCw=
=Y1cF
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk