eTrust 8.1 and MailScanner

[Glenn Steen]

On 19/12/2007, Jens Ahlin <mailing_lists+mailscanner at caleotech.com> wrote:
> > On 19/12/2007, Jens Ahlin <mailing_lists+mailscanner at caleotech.com> wrote:
(snip)
> > Hm, normally you don't use the "disinfect" options unless explicitly
> > setting "Deliver Disinfected Files = yes"... Do you have that?
> > Unless you do, the relevant thing would be to test what output you get
> > from
> > inocmd32 -nex -arc -mod reviewer -spm h /tmp/eicar_test_file
> > ... might be that the defaults have changed?
> >
>
> Thanks for that pointer.
> I noticed this myself just before your post. So I tried :
> inocmd32 -nex -arc -mod reviewer -spm h /tmp/eicar_test_file
> File /tmp/eicar_test_file is infected by virus: the EICAR test string
>
> Total Files Scanned:             1
> Total Viruses Found:             1
> Total Infected Files Found:      1
> Scan Mode:                       Reviewer
>
> *** End Of Summary ***
>
> Still the same result :(
>
(snip)
.... but .... isn't that the string we're after? If you run the
wrapper on that file, what happens then? Try first something like
/usr/lib/MailScanner/etrust-wrapper /opt/eTrustAntivirus -IsItInstalled
... if that fails, well, then something is up with the
installation/the assumptions about the installation (in the wrapper).
You should of course use the third column in virus.scanners.conf (for
the etrust line) as the first parameter:-). Then perhaps try
/usr/lib/MailScanner/etrust-wrapper /opt/eTrustAntivirus -nex -arc
-mod reviewer -spm h /tmp/eicar_test_file
... and see what happens. If you had to amend virus.scanners.conf,
check it with a finetoothed comb for errors;-).

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se