eTrust 8.1 and MailScanner

Jens Ahlin mailing_lists+mailscanner at caleotech.com
Thu Dec 20 14:11:54 GMT 2007


> On 20/12/2007, Jens Ahlin <mailing_lists+mailscanner at caleotech.com> wrote:
>> (snip)
>> >>
>> > Might be "te solution"...:-).
>> > Before doing that though... What MTA do you use? If Postfix, then
>> > check as the user you run it as... Might be something
>> > environment-dependant...
>> >
>>
>> I thought of that but no luck there either...
>> I'm running sendmail, and it's works for the sendmail user. (root)
>>
>>       Jens
> Ok, and if you try clamav instead of clamavmodule, does that work?
>

Hmmm. Looking in the log clamav found the virus but MailScanner did not
report it to postmaster and quarantined the virus as with clamavmodule. I
have the Do not deliver virus setting = yes.

sendmail log:
Dec 20 14:59:50 tiger MailScanner[7470]: Virus and Content Scanning: Starting
Dec 20 14:59:52 tiger MailScanner[7470]:
/var/spool/MailScanner/incoming/7470/./lBKDx5uM007473.message:
Eicar-Test-Signature FOUND
Dec 20 14:59:52 tiger MailScanner[7470]: Virus Scanning: ClamAV found 1
infections
Dec 20 15:02:03 tiger MailScanner[7470]: Virus Scanning: Found 1 viruses
Dec 20 15:02:03 tiger MailScanner[7470]: Uninfected: Delivered 1 messages
Dec 20 15:02:03 tiger MailScanner[7470]: Logging message lBKE1nAY008068 to
SQL
Dec 20 15:02:03 tiger MailScanner[7466]: lBKE1nAY008068: Logged to
MailWatch SQL
Dec 20 15:02:04 tiger sendmail[8132]: STARTTLS=client,
relay=mail.yyyyy.com., version=TLSv1/SSLv3, verify=FAIL,
cipher=DHE-RSA-AES256-SHA, bits=256/256
Dec 20 15:02:04 tiger sendmail[8132]: lBKE1nAY008068: to=<aaa at yyyy.com>,

Maybe it's time to look back into the backupsets and see if I have made
some changes ...

feels like all exec's fails...

      Jens

> Cheers
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



More information about the MailScanner mailing list